NetSight
IP …
medium6.7

CVE-2021-28972

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new …

Impact

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.263
after 4.5 through 4.9.263
from 4.10 before 4.14.227
after 4.15 through 4.19.183
from 4.20 before 5.4.108
from 5.5.0 before 5.10.26
FedoraprojectFedora
Versions 32, 33, 34
NetappCloud Backup
All versions
NetappFas\/Aff Baseboard Management Controller
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions

Weakness classification

CWE-120

References