CVE-2021-47042

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47042
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Free local data after use Fixes the following memory leak in dc_link_construct(): unreferenced object 0xffffa03e81471400 (size 1024): comm "amd_module_load", pid 2486, jiffies 4294946026 (age 10.544s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000000bdf5c4a>] kmem_cache_alloc_trace+0x30a/0x4a0 [<00000000e7c59f0e>] link_create+0xce/0xac0 [amdgpu] [<000000002fb6c072>] dc_create+0x370/0x720 [amdgpu] [<000000000094d1f3>] amdgpu_dm_init+0x18e/0x17a0 [amdgpu] [<00000000bec048fd>] dm_hw_init+0x12/0x20 [amdgpu] [<00000000a2bb7cf6>] amdgpu_device_init+0x1463/0x1e60 [amdgpu] [<0000000032d3bb13>] amdgpu_driver_load_kms+0x5b/0x330 [amdgpu] [<00000000a27834f9>] amdgpu_pci_probe+0x192/0x280 [amdgpu] [<00000000fec7d291>] local_pci_probe+0x47/0xa0 [<0000000055dbbfa7>] pci_device_probe+0xe3/0x180 [<00000000815da970>] really_probe+0x1c4/0x4e0 [<00000000b4b6974b>] driver_probe_device+0x62/0x150 [<000000000f9ecc61>] device_driver_attach+0x58/0x60 [<000000000f65c843>] __driver_attach+0xd6/0x150 [<000000002f5e3683>] bus_for_each_dev+0x6a/0xc0 [<00000000a1cfc897>] driver_attach+0x1e/0x20

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/296443139f893b554dddd56a99ba8471ab5802d4 Patch
https://git.kernel.org/stable/c/616cf23b6cf40ad6f03ffbddfa1b6c4eb68d8ae1 Patch
https://git.kernel.org/stable/c/296443139f893b554dddd56a99ba8471ab5802d4 Patch
https://git.kernel.org/stable/c/616cf23b6cf40ad6f03ffbddfa1b6c4eb68d8ae1 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Dec 2024, 18:41

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/296443139f893b554dddd56a99ba8471ab5802d4 - () https://git.kernel.org/stable/c/296443139f893b554dddd56a99ba8471ab5802d4 - Patch
References () https://git.kernel.org/stable/c/616cf23b6cf40ad6f03ffbddfa1b6c4eb68d8ae1 - () https://git.kernel.org/stable/c/616cf23b6cf40ad6f03ffbddfa1b6c4eb68d8ae1 - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/296443139f893b554dddd56a99ba8471ab5802d4 - () https://git.kernel.org/stable/c/296443139f893b554dddd56a99ba8471ab5802d4 -
References () https://git.kernel.org/stable/c/616cf23b6cf40ad6f03ffbddfa1b6c4eb68d8ae1 - () https://git.kernel.org/stable/c/616cf23b6cf40ad6f03ffbddfa1b6c4eb68d8ae1 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: datos locales gratuitos después de su uso. Corrige la siguiente pérdida de memoria en dc_link_construct(): objeto sin referencia 0xffffa03e81471400 (tamaño 1024): comm "amd_module_load", pid 2486, jiffies 4294946026 (edad 10,544 s) volcado hexadecimal (primeros 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ retroceso: [&lt;000000000bdf5c4a&gt;] kmem_cache_alloc_trace+0x30a/0x4a0 [&lt;00000000e7c59f0e&gt;] link_create+0xce/0xac0 [amdgpu] [&lt;000000002fb6c072&gt;] dc_create+0x370/0x720 [amdgpu] [&lt;000000000094d1f3&gt;] amdgpu_dm_init+0x18e/0x17a0 [amdgpu] [&lt;00000000bec048fd&gt;] dm_hw_in es+0x12/0x20 [amdgpu] [&lt;00000000a2bb7cf6&gt;] amdgpu_device_init+0x1463 /0x1e60 [amdgpu] [&lt;0000000032d3bb13&gt;] amdgpu_driver_load_kms+0x5b/0x330 [amdgpu] [&lt;00000000a27834f9&gt;] amdgpu_pci_probe+0x192/0x280 [amdgpu] [&lt;00000000fec7d29 1&gt;] local_pci_probe+0x47/0xa0 [&lt;0000000055dbbfa7&gt;] pci_device_probe+0xe3/ 0x180 [&lt;00000000815da970&gt;] very_probe+0x1c4/0x4e0 [&lt;00000000b4b6974b&gt;] driver_probe_device+0x62/0x150 [&lt;000000000f9ecc61&gt;] device_driver_attach+0x58/0x60 [&lt;0000000 00f65c843&gt;] __driver_attach+0xd6/0x150 [&lt;000000002f5e3683&gt;] bus_for_each_dev+0x6a/ 0xc0 [&lt;00000000a1cfc897&gt;] controlador_attach+0x1e/0x20

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2024-12-06 18:41

NVD link : CVE-2021-47042

Mitre link : CVE-2021-47042

CVE.ORG link : CVE-2021-47042

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime