CVE-2021-47348

drm/amd/display: Avoid HDCP over-read and corruption

State: Published
Severity: 9.1 Critical
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Avoid HDCP over-read and corruption

Instead of reading the desired 5 bytes of the actual target field, the code was reading 8. This could result in a corrupted value if the trailing 3 bytes were non-zero, so instead use an appropriately sized and zero-initialized bounce buffer, and read only 5 bytes before casting to u64.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

Product	Versions
LinuxLinux	4c283fdac08abf3211533f70623c90a34f41d08d to before c5b518f4b98dbb2bc31b6a55e6aaa1e0e2948f2eAffected 4c283fdac08abf3211533f70623c90a34f41d08d to before 44c7c901cb368a9f2493748f213b247b5872639fAffected 4c283fdac08abf3211533f70623c90a34f41d08d to before 3b2b93a485fb7a970bc8b5daef16f4cf579d172fAffected 4c283fdac08abf3211533f70623c90a34f41d08d to before 06888d571b513cbfc0b41949948def6cb81021b2Affected
LinuxLinux	5.5Affected before 5.5Not affected 5.10.51 through 5.10.Not affected 5.12.18 through 5.12.Not affected 5.13.3 through 5.13.*Not affected 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.