UBUNTU-CVE-2021-42327
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.
02 / AFFECTED SOFTWARE
Affected packages
29 explicit affected versions
26 explicit affected versions
2 explicit affected versions
4 explicit affected versions
7 explicit affected versions
33 explicit affected versions
2 explicit affected versions
38 explicit affected versions
13 explicit affected versions
4 explicit affected versions
10 explicit affected versions
3 explicit affected versions
10 explicit affected versions
10 explicit affected versions
6 explicit affected versions
13 explicit affected versions
11 explicit affected versions
2 explicit affected versions
2 explicit affected versions
3 explicit affected versions
23 explicit affected versions
5 explicit affected versions
11 explicit affected versions
44 explicit affected versions
4 explicit affected versions
9 explicit affected versions
12 explicit affected versions
12 explicit affected versions
7 explicit affected versions
5 explicit affected versions
50 explicit affected versions
16 explicit affected versions
43 explicit affected versions
11 explicit affected versions
6 explicit affected versions
11 explicit affected versions
12 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.
05 / REFERENCES
Further evidence
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c
- https://lists.freedesktop.org/archives/amd-gfx/2021-October/070170.html
- https://ubuntu.com/security/CVE-2021-42327
- https://ubuntu.com/security/notices/USN-5165-1
- https://ubuntu.com/security/notices/USN-5265-1
- https://ubuntu.com/security/notices/USN-5362-1
- https://www.cve.org/CVERecord?id=CVE-2021-42327
- https://www.mail-archive.com/[email protected]/msg69080.html