CVEvulnerability

CVE-2021-28972

6.7 MEDIUM Published 2021-03-22 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2021-03-22
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.

Affected configurations

• linux linux kernel (< 4.4.263) • linux linux kernel (> 4.5 <= 4.9.263) • linux linux kernel (>= 4.10 < 4.14.227) • linux linux kernel (> 4.15 <= 4.19.183) • linux linux kernel (>= 4.20 < 5.4.108) • linux linux kernel (>= 5.5.0 < 5.10.26) • linux linux kernel (>= 5.11 < 5.11.9) • fedoraproject fedora 32 • fedoraproject fedora 33 • fedoraproject fedora 34 • netapp cloud backup • netapp fas\/aff baseboard management controller • netapp solidfire baseboard management controller firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References