CVE-2021-28952: Buffer Overflow
An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.12-rc4
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28952?
CVE-2021-28952 is considered a medium-severity vulnerability due to the buffer overflow issue it presents.
How do I fix CVE-2021-28952?
To fix CVE-2021-28952, users should upgrade to Linux kernel version 5.12-rc4 or later.
What versions of the Linux kernel are affected by CVE-2021-28952?
CVE-2021-28952 affects Linux kernel versions up to and including 5.11.8.
Can CVE-2021-28952 impact the performance of my system?
Yes, CVE-2021-28952 can lead to unexpected behavior or crashes, potentially impacting system performance.
Is there a specific device driver impacted by CVE-2021-28952?
CVE-2021-28952 specifically affects the sound/soc/qcom/sdm845.c soundwire device driver.