CVE-2021-47609
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30. Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.26% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/4694b1ec425a2d20d6f8ca3db594829fdf5f2672Patch
- https://git.kernel.org/stable/c/639901b9429a3195e0fead981ed74b51f5f31538Patch
- https://git.kernel.org/stable/c/7e8645ca2c0046f7cd2f0f7d569fc036c8abaedbPatch
- https://git.kernel.org/stable/c/802a1a8501563714a5fe8824f4ed27fec04a0719Patch
- https://git.kernel.org/stable/c/865ed67ab955428b9aa771d8b4f1e4fb7fd08945Patch
- https://git.kernel.org/stable/c/976389cbb16cee46847e5d06250a3a0b5506781ePatch
- https://git.kernel.org/stable/c/f0f484714f35d24ffa0ecb4afe3df1c5b225411dPatch
- https://git.kernel.org/stable/c/4694b1ec425a2d20d6f8ca3db594829fdf5f2672Patch
- https://git.kernel.org/stable/c/639901b9429a3195e0fead981ed74b51f5f31538Patch
- https://git.kernel.org/stable/c/7e8645ca2c0046f7cd2f0f7d569fc036c8abaedbPatch
- https://git.kernel.org/stable/c/802a1a8501563714a5fe8824f4ed27fec04a0719Patch
- https://git.kernel.org/stable/c/865ed67ab955428b9aa771d8b4f1e4fb7fd08945Patch
- https://git.kernel.org/stable/c/976389cbb16cee46847e5d06250a3a0b5506781ePatch
- https://git.kernel.org/stable/c/f0f484714f35d24ffa0ecb4afe3df1c5b225411dPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.