9.1 Critical

CVE-2021-47348 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption…

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the desired 5 bytes of the actual target field, the code was reading 8. This could result in a corrupted value if the trailing 3 bytes were non-zero, so instead use an appropriately sized and zero-initialized bounce buffer, and read only 5 bytes before casting to u64.

Affected products and versions

Product	Affected versions	Fixed in
Linux 5.14	earliest → < 5.14	5.14
Linux 5.13	earliest → < 5.13.3	5.13.3
Linux 5.12	earliest → < 5.12.18	5.12.18
Linux 5.10	earliest → < 5.10.51	5.10.51
Linux	5.5	No fix stated
linux_kernel 5.13	earliest → < 5.13.3	5.13.3