What’s Vulnerable › Vulnerabilities

CVE-2021-28972

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-22 · updated 2026-10-08
• Weakness: CWE-120

Description

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.

Affected products

• Fedoraproject Fedora: 32, 33, 34
• Linux kernel: before 4.4.263; from 4.5 (excl.) through 4.9.263; from 4.10 before 4.14.227; from 4.15 (excl.) through 4.19.183; from 4.20 before 5.4.108; from 5.5.0 before 5.10.26 — fixed in 4.14.227, 4.4.263, 5.10.26, 5.11.9, 5.4.108
• NetApp Cloud Backup: all versions
• NetApp Fas/Aff Baseboard Management Controller: all versions
• NetApp Solidfire Baseboard Management Controller Firmware: all versions

How to fix

Upgrade to a fixed version: Linux kernel 4.14.227, 4.4.263, 5.10.26, 5.11.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/
• https://security.netapp.com/advisory/ntap-20210430-0003/
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/
• https://security.netapp.com/advisory/ntap-20210430-0003/

Get alerted when CVE-2021-28972 or the next vulnerability affects your stack