CVE:CVE-2021-42327
CNNVD:CNNVD-202110-1543
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.14.14之前版本存在安全漏洞，该漏洞源于内核中drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c文件的dp_link_settings_write中存在基于堆的缓冲区溢出，攻击者可利用该漏洞可以写一个字符串到AMD GPU显示驱动调试文件系统。在parse_write_buffer_into_params函数中，当它使用从用户复制一个用户空间缓冲区到40字节堆缓冲区的大小时，函数并不检查大小。
solution:Upgrade linux linux_kernel to a higher version than 5.14.14,and avoid the version (,5.14.14]; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -