CVE-2021-42327: fedoraproject fedora Out-of-bounds Write
Vulnerability summary
CVE-2021-42327 is a medium (CVSS 6.7) Out-of-bounds Write vulnerability in fedoraproject fedora. EPSS estimates a 0.87% chance of exploitation in the next 30 days, higher than 58.9% of scored vulnerabilities.
Not severe (CVSS 6.7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 5Timeline
- 21-10-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.87%
Chance of exploitation in the next 30 days
Percentile
59%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.87% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu36 products
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11< 5.11.0-1028.31~20.04.1
- linux-aws-5.13< 5.13.0-1012.13~20.04.1
- linux-aws-5.3All versions (No fix recorded)
- linux-aws-5.8All versions (No fix recorded)
Debian1 product
- linux< 5.14.16-1
Fedoraproject1 product
- fedoraEOL35
Linux1 product
- linux_kernel≤ 5.14.14
5 vendors · 47 products
References
14 links- lists.fedoraproject.org/archives/…Vendor Advisory
- security.netapp.com/advisory/ntap-20211118-0005/Third Party Advisory
