CVE-2021-47609
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
HIGH 7.8
En bref
- Source
- NVD
- EPSS
- EPSS 0.26 % · centile 18 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30. Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
Faiblesses (CWE)
- CWE-120 — Copie de tampon sans vérification de taille (débordement classique)
Références
- https://git.kernel.org/stable/c/639901b9429a3195e0fead981ed74b51f5f31538
- https://git.kernel.org/stable/c/4694b1ec425a2d20d6f8ca3db594829fdf5f2672
- https://git.kernel.org/stable/c/7e8645ca2c0046f7cd2f0f7d569fc036c8abaedb
- https://git.kernel.org/stable/c/802a1a8501563714a5fe8824f4ed27fec04a0719
- https://git.kernel.org/stable/c/f0f484714f35d24ffa0ecb4afe3df1c5b225411d
- https://git.kernel.org/stable/c/976389cbb16cee46847e5d06250a3a0b5506781e
- https://git.kernel.org/stable/c/865ed67ab955428b9aa771d8b4f1e4fb7fd08945
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2021-34611
- GCVE · GCVE-0-2021-47609
Avis du CERT-FR
- CERTFR-2026-AVI-1165 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2025-AVI-1057 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0821 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0693 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0610 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0578 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.8 < 4.9.294cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.10 < 4.14.259cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15 < 4.19.222cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.168cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.88cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.11cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 < 639901b9429a3195e0fead981ed74b51f5f31538 ; affected 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 < 4694b1ec425a2d20d6f8ca3db594829fdf5f2672 ; affected 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 < 7e8645ca2c0046f7cd2f0f7d569fc036c8abaedb ; affected 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 < 802a1a8501563714a5fe8824f4ed27fec04a0719 ; affected 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 < f0f484714f35d24ffa0ecb4afe3df1c5b225411d ; affected 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 < 976389cbb16cee46847e5d06250a3a0b5506781e |
| Linux · Linux | affected 4.8 ; unaffected 0 < 4.8 ; unaffected 4.9.294 ≤ 4.9.* ; unaffected 4.14.259 ≤ 4.14.* ; unaffected 4.19.222 ≤ 4.19.* ; unaffected 5.4.168 ≤ 5.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |