dplinksettingswrite in drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parsewritebufferintoparams when it uses the size of copyfromuser to copy a userspace buffer into a 40-byte heap buffer.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-42327.json"
[
{
"id": "CVE-2021-42327-8d254aea",
"target": {
"function": "dp_link_settings_write",
"file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f23750b5b3d98653b31d4469592935ef6364ad67",
"digest": {
"function_hash": "191451790856248391049891303642345008791",
"length": 1333.0
},
"signature_type": "Function"
}
]