PT-2025-7953

CVE-2021-47642

·

Published

2022-01-29

·

Updated

2025-09-23

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential buffer overflow issue has been identified in the Linux kernel, specifically in the nvidiafb module. The issue arises from the use of strcpy() to copy a string into a fixed-size buffer chan->adapter.name without checking the length, which could lead to a buffer overflow. This has been flagged by Coverity as a possible buffer overflow, although the scope of the function suggests it may not be exploitable. The issue has been resolved by using strscpy() to prevent buffer overflows.
Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this buffer overflow issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
OESA-2025-1282
OPENSUSE-SU-2025_1263-1
SUSE-SU-2025:1027-1
SUSE-SU-2025_1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1194-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1
SUSE-SU-2025:1263-1
SUSE-SU-2025_1263-1
Found an issue in the description? Have something to add? Feel free to write us 👾