CVE-2021-28952: Buffer Overflow
Published Mar 20, 2021
·Updated
An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)
Affected Software
22 affected componentsFixes available
Linux Linux kernel<=5.11.8
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Fedoraproject Fedora=34
NetApp Cloud Backup
All of the following
NetApp A250 Firmware
NetApp A250
All of the following
NetApp Aff 500f Firmware
NetApp Aff 500f
All of the following
NetApp Fas 500f Firmware
NetApp Fas 500f
All of the following
NetApp Solidfire Baseboard Management Controller Firmware
NetApp Solidfire Baseboard Management Controller
NetApp A250 Firmware
NetApp A250
NetApp Aff 500f Firmware
NetApp Aff 500f
NetApp Fas 500f Firmware
NetApp Fas 500f
NetApp Solidfire Baseboard Management Controller Firmware
NetApp Solidfire Baseboard Management Controller
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Mar 20, 2021
CVE Published
via MITRE·08:05 PM
Data Sourced
via MITRE·08:05 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:56 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:31 AM
RemedyDescriptionSeverityAffected Software
Apr 8, 2025
Data Sourced
via Debian·04:25 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-28952?
CVE-2021-28952 is considered a medium-severity vulnerability due to the buffer overflow issue it presents.
2
How do I fix CVE-2021-28952?
To fix CVE-2021-28952, users should upgrade to Linux kernel version 5.12-rc4 or later.
3
What versions of the Linux kernel are affected by CVE-2021-28952?
CVE-2021-28952 affects Linux kernel versions up to and including 5.11.8.
4
Can CVE-2021-28952 impact the performance of my system?
Yes, CVE-2021-28952 can lead to unexpected behavior or crashes, potentially impacting system performance.
5
Is there a specific device driver impacted by CVE-2021-28952?
CVE-2021-28952 specifically affects the sound/soc/qcom/sdm845.c soundwire device driver.