PT-2025-7953 · Linux+3 · Linux Kernel+3
Published
2022-01-29
·
Updated
2025-09-23
·
CVE-2021-47642
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A potential buffer overflow issue has been identified in the Linux kernel, specifically in the nvidiafb module. The issue arises from the use of
strcpy() to copy a string into a fixed-size buffer chan->adapter.name without checking the length, which could lead to a buffer overflow. This has been flagged by Coverity as a possible buffer overflow, although the scope of the function suggests it may not be exploitable. The issue has been resolved by using strscpy() to prevent buffer overflows.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this buffer overflow issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse