WS-2021-0548

Linux/Kernel is vulnerable to string overflow in SCPI genpd driver in drivers/firmware/scpipmdomain.c...

CVE-2021-47609

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...

CVE-2021-47609

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...

CVE-2021-47609 firmware: arm_scpi: Fix string overflow in SCPI genpd driver

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...

CVE-2021-47609

CVE-2021-47609 : Linux kernel vulnerability in the SCPI genpd driver for arm SCPI firmware. The issue was a missing bound check on scpi_pd->name, which could overflow a 30-byte buffer when copying the device name, potentially leading to memory corruption. The fix allocates the string dynamical...

GSD-2021-1002665 firmware: arm_scpi: Fix string overflow in SCPI genpd driver

firmware: armscpi: Fix string overflow in SCPI genpd driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002630 firmware: arm_scpi: Fix string overflow in SCPI genpd driver

firmware: armscpi: Fix string overflow in SCPI genpd driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.259 by commit...

PT-2021-27195

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a string overflow in the SCPI genpd driver. It was introduced in version v4.8 and fixed in Linux Kernel version v5.15.11. The actual impact and attack plausibility hav...

PT-2021-27087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.294 Description The issue is related to a string overflow in the SCPI genpd driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-27133

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to a string overflow in the SCPI genpd driver. It was introduced in version v4.8 and fixed in Linux Kernel version v5.4.168. The actual impact and attack plausibility hav...

PT-2021-27098

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description The issue is related to a string overflow in the SCPI genpd driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-27113

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description The issue is related to a string overflow in the SCPI genpd driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-8239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a string overflow in the SCPI genpd driver of the Linux kernel. Without bound checks for scpi pd-name, it could result in a buffer overflow when copying the SCPI...