Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2021-47348

drm/amd/display: Avoid HDCP over-read and corruption

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the desired 5 bytes of the actual target field, the code was reading 8. This could result in a corrupted value if the trailing 3 bytes were non-zero, so instead use an appropriately sized and zero-initialized bounce buffer, and read only 5 bytes before casting to u64.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4c283fdac08abf3211533f70623c90a34f41d08d to < c5b518f4b98dbb2bc31b6a55e6aaa1e0e2948f2eaffected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to < 44c7c901cb368a9f2493748f213b247b5872639faffected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to < 3b2b93a485fb7a970bc8b5daef16f4cf579d172faffected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to < 06888d571b513cbfc0b41949948def6cb81021b2affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 5.10.51 to ≤ 5.10.*unaffected
  • 5.12.18 to ≤ 5.12.*unaffected
  • 5.13.3 to ≤ 5.13.*unaffected
  • 5.14 to ≤ *unaffected

References