dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.

...

AZL-6600 CVE-2021-42327 affecting package kernel for versions less than 5.10.78.1-1

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

DEBIAN-CVE-2021-42327

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

CVE-2021-42327

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

CVE-2021-42327

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

UBUNTU-CVE-2021-42327

dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparam...

PT-2021-23571

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.15 Description The issue allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse write buffer into...

UVI-2021-1001679 drm/amdgpu: fix gart.bo pin_count leak

drm/amdgpu: fix gart.bo pincount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.13 by commit 18d1c5ea3798ba42cfa0f8b2264d873463facb0...

GSD-2021-1001620 drm/amdgpu: fix gart.bo pin_count leak

drm/amdgpu: fix gart.bo pincount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.74 by commit 621ddffb70db824eabd63d18ac635180fe9500f...

GSD-2021-1001576 drm/amdgpu: fix gart.bo pin_count leak

drm/amdgpu: fix gart.bo pincount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.154 by commit 83d857d6b0967b6709cd38750c3ce2ed8ced1a9...

PT-2021-26149

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.13 Description A potential security issue exists due to a gart.bo pin count leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26046

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.154 Description A potential security issue exists due to a gart.bo pin count leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30155

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to the handling of a specific case in the amdgpu pci resume function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kerne...

PT-2021-30144

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.13 Description A potential security issue exists due to a gart.bo pin count leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to the handling of a specific case in the amdgpu pci resume function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kerne...

PT-2021-30085

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.74 Description A potential security issue exists due to a gart.bo pin count leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.74 Description A potential security issue exists due to a gart.bo pin count leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30041

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.154 Description A potential security issue exists due to a gart.bo pin count leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For versions...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3447-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1173746 1176940 1184439 1184804 1185302 1185677 1185726 1185762 1187167 1188067 1188651 1188986 1189297...

PT-2024-11417

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when a PCI error state pci channel io normal is detected, leading to a report of PCI ERS RESULT CAN RECOVER status to the PCI driver. This causes the PCI driver to...