CVE-2021-42739: Debian Linux

Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days.

The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only; version 34 only; version 35 only
• Linux Linux Kernel: up to and including 5.14.13
• Oracle Communications Cloud Native Core Binding Support Function: version 22.1.3 only
• Oracle Communications Cloud Native Core Network Exposure Function: version 22.1.1 only
• Oracle Communications Cloud Native Core Policy: version 22.2.0 only
• Starwindsoftware Starwind San & NAS: version v8r12 only
• Starwindsoftware Starwind Virtual San: version v8r13 only

Published 2021-10-20. Last modified 2026-06-17.