CVE-2021-42739

—

CVSS 3.1

6.7 medium

EPSS

<1%p39

Published

Oct 20, 2021 (Oct 20, 2021)

Modified

Jun 17, 2026

Description

The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.

Vendors: linux fedoraproject debian starwindsoftware oracle
Products: linux kernel, fedora, debian linux, starwind san \& nas, starwind virtual san, communications cloud native core binding support function, communications cloud native core network exposure function, communications cloud native core policy
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.