CVE-2021-47348: Linux Kernel

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the desired 5 bytes of the actual target field, the code was reading 8. This could result in a corrupted value if the trailing 3 bytes were non-zero, so instead use an appropriately sized and zero-initialized bounce buffer, and read only 5 bytes before casting to u64.

Affected products

• Linux Linux Kernel: before 5.10.51 (fixed in 5.10.51); from 5.11, before 5.12.18 (fixed in 5.12.18); from 5.13, before 5.13.3 (fixed in 5.13.3)

Published 2024-05-21. Last modified 2026-06-17.