← Back

CVE-2021-28952

nvd nist
Published: Mar 20, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)

Affected (9)

Linux
1 product
Linux Kernel
Fedoraproject
1 product
Fedora
Netapp
5 products
Cloud Backup
A250 Firmware
Aff 500f Firmware
Fas 500f Firmware
Solidfire Baseboard Management Controller Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Up to 5.11.8
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 32
Fedora
Version 33
Fedora
Version 34
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
A250 Firmware
All versions
Running on/withPlatform Versions
Netapp
A250
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff 500f Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff 500f
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas 500f Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas 500f
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Solidfire Baseboard Management Controller Firmware
All versions
Running on/withPlatform Versions
Netapp
Solidfire Baseboard Management Controller
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (12)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.