CVE-2021-47642: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidia_setup_i2c_bus() it looks like that can't happen after examiniing the call sites. CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW) 1. fixed_size_dest: You might overrun the 48-character fixed-size string chan->adapter.name by copying name without checking the length. 2. parameter_as_source: Note: This defect has an elevated risk because the source argument is a parameter of the current function. 89 strcpy(chan->adapter.name, name); Fix this warning by using strscpy() which will silence the warning and prevent any future buffer overflows should the names used to identify the channel become much longer.

Affected products

• Linux Linux Kernel: before 4.9.311 (fixed in 4.9.311); from 4.10, before 4.14.276 (fixed in 4.14.276); from 4.15, before 4.19.238 (fixed in 4.19.238); from 4.20, before 5.4.189 (fixed in 5.4.189); from 5.5, before 5.10.110 (fixed in 5.10.110); from 5.11, before 5.15.33 (fixed in 5.15.33); …

Published 2025-02-26. Last modified 2026-06-17.