← Back

CVE-2021-28972

nvd nist
Published: Mar 22, 2021Modified: Oct 8, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.

Affected (13)

Linux
1 product
Linux Kernel
Fedoraproject
1 product
Fedora
Netapp
3 products
Cloud Backup
Fas/aff Baseboard Management Controller
Solidfire Baseboard Management Controller Firmware
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
version < 4.4.263
Linux Kernel
4.15 < version ≤ 4.19.183
Linux Kernel
4.5 < version ≤ 4.9.263
Linux Kernel
4.10 ≤ version < 4.14.227
Linux Kernel
4.20 ≤ version < 5.4.108
Linux Kernel
5.11 ≤ version < 5.11.9
Linux Kernel
5.5.0 ≤ version < 5.10.26
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 32
Fedora
Version 33
Fedora
Version 34
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Fas/aff Baseboard Management Controller
All versions
Solidfire Baseboard Management Controller Firmware
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (10)

Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.