CVE-2021-47348

drm/amd/display: Avoid HDCP over-read and corruption

Critical · published May 21, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

🔥 A simple oversight could lead to major chaos! The Linux kernel was reading 8 bytes instead of the needed 5, potentially corrupting data in your display drivers. 😱 Think of it like ordering a coffee and receiving a cup that's overfilled with froth — the extra foam (or bytes) could just ruin the drink (or data) if you're not careful! If an attacker can manipulate the data being read, they could cause display corruption, leading to erratic behavior on your devices. This could manifest as graphical glitches or even system crashes, which are absolutely devastating for user experience and system stability.

Put simply

Think of it like ordering a coffee and receiving a cup that's overfilled with froth — the extra foam (or bytes) could just ruin the drink (or data) if you're not careful! This vulnerability in the Linux kernel's DRM for AMD display drivers allows for an over-read of 3 extra bytes when it should've only read 5 — potentially leading to corrupt or unexpected values being processed.

What to do

If an attacker can manipulate the data being read, they could cause display corruption, leading to erratic behavior on your devices. This could manifest as graphical glitches or even system crashes, which are absolutely devastating for user experience and system stability. Update your Linux kernel to the latest version where this issue is patched. Specifically, ensure you are running at least version 5.16.10 or later to avoid this critical vulnerability. Review your system's documentation for proper update procedures. You've got this! Stay vigilant and keep your systems updated to fend off vulnerabilities like this one! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Published
2024-05-21T14:35Z
EPSS history
Timeline
  • 21 MAY 14:35Z
    drm/amd/display: Avoid HDCP over-read and corruption
    cvelistv5