Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47609

firmware: arm_scpi: Fix string overflow in SCPI genpd driver

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30. Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 to < 639901b9429a3195e0fead981ed74b51f5f31538affected
  • 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 to < 4694b1ec425a2d20d6f8ca3db594829fdf5f2672affected
  • 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 to < 7e8645ca2c0046f7cd2f0f7d569fc036c8abaedbaffected
  • 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 to < 802a1a8501563714a5fe8824f4ed27fec04a0719affected
  • 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 to < f0f484714f35d24ffa0ecb4afe3df1c5b225411daffected
  • 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 to < 976389cbb16cee46847e5d06250a3a0b5506781eaffected
  • 8bec4337ad4023b26de35d3b0c3a3b2735ffc5c7 to < 865ed67ab955428b9aa771d8b4f1e4fb7fd08945affected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 4.9.294 to ≤ 4.9.*unaffected
  • 4.14.259 to ≤ 4.14.*unaffected
  • 4.19.222 to ≤ 4.19.*unaffected
  • 5.4.168 to ≤ 5.4.*unaffected
  • 5.10.88 to ≤ 5.10.*unaffected
  • 5.15.11 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References