CVE-2021-47489: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix even more out of bound writes from debugfs CVE-2021-42327 was fixed by…

PriorityP338high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.22%

12.4th percentile

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix even more out of bound writes from debugfs

CVE-2021-42327 was fixed by:

commit f23750b5b3d98653b31d4469592935ef6364ad67
Author: Thelford Williams
Date: Wed Oct 13 16:04:13 2021 -0400

drm/amdgpu: fix out of bounds write

but amdgpu_dm_debugfs.c contains more of the same issue so fix the
remaining ones.

v2:
* Add missing fix in dp_max_bpc_write (Harry Wentland)

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	linux	< linux 5.15.3-1 (bookworm)	linux 5.15.3-1 (bookworm)
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 5.10.237-1	5.10.237-1
linux	linux_kernel	>= 0 < 5.15.3-1	5.15.3-1
linux	linux_kernel	>= 0 < 5.15.3-1	5.15.3-1
linux	linux_kernel	>= 0 < 5.15.3-1	5.15.3-1
linux	linux_kernel	>= 5.10 < 5.10.236	5.10.236
linux	linux_kernel	>= 5.11 < 5.14.16	5.14.16

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv6.7MEDIUM

vendor_debian6.7MEDIUM

vendor_redhat6.7MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.