CVE-2021-28972: Buffer Overflow
In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because addslotstore and removeslotstore mishandle drcname '\0' termination, aka CID-cc7a0bb058b8.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28972?
CVE-2021-28972 has a high severity due to the user-tolerable buffer overflow vulnerability that poses significant risks to system security.
How do I fix CVE-2021-28972?
To fix CVE-2021-28972, you should upgrade your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.10-1.
Which systems are affected by CVE-2021-28972?
CVE-2021-28972 affects various versions of the Linux kernel up to 5.11.8, including specific Fedora and NetApp versions.
What type of vulnerability is CVE-2021-28972?
CVE-2021-28972 is classified as a buffer overflow vulnerability in the RPA PCI Hotplug driver.
Can CVE-2021-28972 lead to privileged access?
Yes, CVE-2021-28972 can allow userspace to write data into the kernel stack frame, potentially leading to privilege escalation.