PT-2021-23571 · Amd+5 · Amdgpu+5

Thelford Williams · Published 2021-10-21 · Updated 2025-09-29 · CVE-2021-42327

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.15

Description The issue allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse write buffer into params when it uses the size of copy from user to copy a userspace buffer into a 40-byte heap buffer. This occurs in the dp link settings write function in the amdgpu dm debugfs.c file.

Recommendations For Linux kernel versions prior to 5.14.15, update to version 5.14.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the AMD GPU display drivers debug filesystem to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2024_2394

ALSA-2025_16880

ALT-PU-2021-3220

ALT-PU-2021-3232

ALT-PU-2021-3270

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-6600

CVE-2021-42327

MGASA-2021-0507

MGASA-2021-0508

SUSE-SU-2024:2008-1

SUSE-SU-2024_2008-1

SUSE-SU-2025:0231-1

USN-5165-1

USN-5265-1

USN-5362-1

Affected Products

Alt Linux

Amdgpu

Astra Linux

Linuxmint

Suse

Ubuntu

References · 1329

• 🔥 https://github.com/docfate111/CVE-2021-42327 · Exploit
• https://ubuntu.com/security/CVE-2022-0330 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5265-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3640 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5362-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42327 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0231-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-42327 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-42327 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5165-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27820 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0185 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-42327 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0507 · Vendor Advisory