Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux kernel 缓冲区错误漏洞
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 5.14.14之前版本存在安全漏洞，该漏洞源于内核中drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c文件的dp_link_settings_write中存在基于堆的缓冲区溢出，攻击者可利用该漏洞可以写一个字符串到AMD GPU显示驱动调试文件系统。在parse_write_buffer_into_params函数中，当它使用从用户
CVSS Information
N/A
Vulnerability Type
N/A