CVE-2021-42327: Buffer Overflow
dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparams when it uses the size of copyfromuser to copy a userspace buffer into a 40-byte heap buffer.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42327?
CVE-2021-42327 is considered a high severity vulnerability due to its potential for heap-based buffer overflow allowing remote code execution.
How do I fix CVE-2021-42327?
To fix CVE-2021-42327, upgrade to Linux kernel versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.11-1 and later.
Which versions of Linux are affected by CVE-2021-42327?
CVE-2021-42327 affects Linux kernel versions up to and including 5.14.14.
What types of systems are vulnerable to CVE-2021-42327?
CVE-2021-42327 primarily affects systems running the Linux kernel, specifically those utilizing AMD GPU display drivers.
Can CVE-2021-42327 be exploited remotely?
Yes, CVE-2021-42327 can be exploited remotely by an attacker who can write to the AMD GPU display drivers debug filesystem.