CVE-2021-28952

CVSS v3.1 7.8 (High)

CVSS v2.0 4.6 (Medium)

EPSS 0.05 % (20^th)

Affected Products 11

Advisories 10

An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)

Weaknesses

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2021-03-20 21:15:11
(3 years ago)
Updated Date: 2023-11-07 03:32:24
(10 months ago)

Affected Products

Fedoraproject

Fedora

Linux

Linux Kernel

Netapp

Configuration #1

		CPE23	From	Up To
	Linux Kernel 5.11.8 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 5.11.8

Configuration #2

		CPE23	From	Up To
	Fedoraproject Fedora 32	cpe:2.3:o:fedoraproject:fedora:32
	Fedoraproject Fedora 33	cpe:2.3:o:fedoraproject:fedora:33
	Fedoraproject Fedora 34	cpe:2.3:o:fedoraproject:fedora:34

Configuration #3

		CPE23	From	Up To
	Netapp Cloud Backup	cpe:2.3:a:netapp:cloud_backup:-

Configuration #4

AND

		CPE23
OR
	Netapp A250 Firmware	cpe:2.3:o:netapp:a250_firmware:-
OR
	Running on/with
	Netapp A250	cpe:2.3:h:netapp:a250:-

Configuration #5

AND

		CPE23
OR
	Netapp Aff 500f Firmware	cpe:2.3:o:netapp:aff_500f_firmware:-
OR
	Running on/with
	Netapp Aff 500f	cpe:2.3:h:netapp:aff_500f:-

Configuration #6

AND

		CPE23
OR
	Netapp Fas 500f Firmware	cpe:2.3:o:netapp:fas_500f_firmware:-
OR
	Running on/with
	Netapp Fas 500f	cpe:2.3:h:netapp:fas_500f:-

Configuration #7

AND

		CPE23
OR
	Netapp Solidfire Baseboard Management Controller Firmware	cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-
OR
	Running on/with
	Netapp Solidfire Baseboard Management Controller	cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-