CVE-2021-28972: In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• fedoraproject fedora32
• fedoraproject fedora33
• fedoraproject fedora34
• linux linux kernelafter 4.15 · up to 4.19.183 inclusive
• linux linux kernel4.20 and later · before 5.4.108
• linux linux kernel5.5.0 and later · before 5.10.26
• linux linux kernel5.11 and later · before 5.11.9
• linux linux kernelbefore 4.4.263
• linux linux kernelafter 4.5 · up to 4.9.263 inclusive
• linux linux kernel4.10 and later · before 4.14.227
• netapp cloud backupall versions
• netapp fas/aff baseboard management controllerall versions
• netapp solidfire baseboard management controller firmwareall versions

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2021-28964Mar 22, 2021 · A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8.
  18Monitor
• ← EarlierCVE-2021-28971Mar 22, 2021 · In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (s
  22Monitor
• Later →CVE-2021-20219Mar 23, 2021 · A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel.
  22Monitor

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.