CVE-2021-28952: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Linux Linux Kernel: up to and including 5.11.8
• Netapp a250 Firmware: affected versions not specified
• Netapp Aff 500f Firmware: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp Fas 500f Firmware: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified

Published 2021-03-20. Last modified 2026-06-17.