CVE-2021-47642
published 2025-02-26CVE-2021-47642: In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow Coverity complains of a…
PriorityP341high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.27%
18.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Coverity complains of a possible buffer overflow. However,
given the 'static' scope of nvidia_setup_i2c_bus() it looks
like that can't happen after examiniing the call sites.
CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW)
1. fixed_size_dest: You might overrun the 48-character fixed-size string
chan->adapter.name by copying name without checking the length.
2. parameter_as_source: Note: This defect has an elevated risk because the
source argument is a parameter of the current function.
89 strcpy(chan->adapter.name, name);
Fix this warning by using strscpy() which will silence the warning and
prevent any future buffer overflows should the names used to identify the
channel become much longer.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 47e5533adf118afaf06d25a3e2aaaab89371b1c5 | 47e5533adf118afaf06d25a3e2aaaab89371b1c5 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 580e5d3815474b8349250c25c16416585a72c7fe | 580e5d3815474b8349250c25c16416585a72c7fe |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 72dd5c46a152136712a55bf026a9aa8c1b12b60d | 72dd5c46a152136712a55bf026a9aa8c1b12b60d |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 055cdd2e7b992921424d4daaa285ced787fb205f | 055cdd2e7b992921424d4daaa285ced787fb205f |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 08dff482012758935c185532b1ad7d584785a86e | 08dff482012758935c185532b1ad7d584785a86e |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9ff2f7294ab0f011cd4d1b7dcd9a07d8fdf72834 | 9ff2f7294ab0f011cd4d1b7dcd9a07d8fdf72834 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6a5226e544ac043bb2d8dc1bfe8920d02282f7cd | 6a5226e544ac043bb2d8dc1bfe8920d02282f7cd |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 41baa86b6c802cdc6ab8ff2d46c083c9be93de81 | 41baa86b6c802cdc6ab8ff2d46c083c9be93de81 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 37a1a2e6eeeb101285cd34e12e48a881524701aa | 37a1a2e6eeeb101285cd34e12e48a881524701aa |
| linux | linux_kernel | < 4.9.311 | 4.9.311 |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 4.10 < 4.14.276 | 4.14.276 |
| linux | linux_kernel | >= 4.15 < 4.19.238 | 4.19.238 |
| linux | linux_kernel | >= 4.20 < 5.4.189 | 5.4.189 |
| linux | linux_kernel | >= 5.11 < 5.15.33 | 5.15.33 |
| linux | linux_kernel | >= 5.16 < 5.16.19 | 5.16.19 |
| linux | linux_kernel | >= 5.17 < 5.17.2 | 5.17.2 |
| linux | linux_kernel | >= 5.5 < 5.10.110 | 5.10.110 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
vendor_redhat·2025-02-26·CVSS 7.8
CVE-2021-47642 [HIGH] kernel: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
kernel: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Coverity complains of a possible buffer overflow. However,
given the 'static' scope of nvidia_setup_i2c_bus() it looks
like that can't happen after examiniing the call sites.
CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW)
1. fixed_size_dest: You might overrun the 48-character fixed-size string
chan->adapter.name by copying name without checking the length.
2. parameter_as_source: Note: This defect has an elevated risk because the
source argument is a parameter of the current function.
89 strcpy(chan->adapter.name, name);
Fix this warning by using strscpy() which will
Debian
CVE-2021-47642: linux - In the Linux kernel, the following vulnerability has been resolved: video: fbde...
vendor_debian·2021·CVSS 7.8
CVE-2021-47642 [HIGH] CVE-2021-47642: linux - In the Linux kernel, the following vulnerability has been resolved: video: fbde...
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidia_setup_i2c_bus() it looks like that can't happen after examiniing the call sites. CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW) 1. fixed_size_dest: You might overrun the 48-character fixed-size string chan->adapter.name by copying name without checking the length. 2. parameter_as_source: Note: This defect has an elevated risk because the source argument is a parameter of the current function. 89 strcpy(chan->adapter.name, name); Fix this warning by using strscpy() which will silence the warning and prevent any future buffer overflows should the na
GHSA
GHSA-c3h6-p6wc-j6mg: In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Coverity compla
ghsa_unreviewed·2025-09-23
CVE-2021-47642 [HIGH] CWE-787 GHSA-c3h6-p6wc-j6mg: In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Coverity compla
In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Coverity complains of a possible buffer overflow. However,
given the 'static' scope of nvidia_setup_i2c_bus() it looks
like that can't happen after examiniing the call sites.
CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW)
1. fixed_size_dest: You might overrun the 48-character fixed-size string
chan->adapter.name by copying name without checking the length.
2. parameter_as_source: Note: This defect has an elevated risk because the
source argument is a parameter of the current function.
89 strcpy(chan->adapter.name, name);
Fix this warning by using strscpy() which will silence the warning and
prevent any future buffer overflows should th
OSV
CVE-2021-47642: In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow Coverity complain
osv·2025-02-26·CVSS 7.8
CVE-2021-47642 [HIGH] CVE-2021-47642: In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow Coverity complain
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidia_setup_i2c_bus() it looks like that can't happen after examiniing the call sites. CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW) 1. fixed_size_dest: You might overrun the 48-character fixed-size string chan->adapter.name by copying name without checking the length. 2. parameter_as_source: Note: This defect has an elevated risk because the source argument is a parameter of the current function. 89 strcpy(chan->adapter.name, name); Fix this warning by using strscpy() which will silence the warning and prevent any future buffer overflows should the na
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/055cdd2e7b992921424d4daaa285ced787fb205fhttps://git.kernel.org/stable/c/08dff482012758935c185532b1ad7d584785a86ehttps://git.kernel.org/stable/c/37a1a2e6eeeb101285cd34e12e48a881524701aahttps://git.kernel.org/stable/c/41baa86b6c802cdc6ab8ff2d46c083c9be93de81https://git.kernel.org/stable/c/47e5533adf118afaf06d25a3e2aaaab89371b1c5https://git.kernel.org/stable/c/580e5d3815474b8349250c25c16416585a72c7fehttps://git.kernel.org/stable/c/6a5226e544ac043bb2d8dc1bfe8920d02282f7cdhttps://git.kernel.org/stable/c/72dd5c46a152136712a55bf026a9aa8c1b12b60dhttps://git.kernel.org/stable/c/9ff2f7294ab0f011cd4d1b7dcd9a07d8fdf72834
2025-02-26
Published