A flaw in the Linux kernels implementation of the RPA PCI Hotplug driver. A user with permissions to write to the sysfs settings for this driver can trigger a buffer overflow when writing a new device name to the driver from userspace, overwriting data in the kernel's stack.
At this time this driver is only used by Power-PC based systems and does not affect x86-64, ARM, s390 architectures.
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1941782]
This only affects the powerpc architecture, so its not affecting or built for x86 or ARM.
This flaw is rated as moderate, the sysfs file requires root or CAP_SYS_ADMIN priledges to be able to abuse this flaw.
Mitigation for this issue is either not available or the currently available options does not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.