CVE-2021-47659

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47659
In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 in __drm_universal_plane_init() shouldn't be hit (it's a WARN_ON), in its current position it will then leak the plane->format_types array and fail to call drm_mode_object_unregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1e29d829ad51d1472dd035487953a6724b56fc33 Patch
https://git.kernel.org/stable/c/4ab7e453a3ee88c274cf97bee9487ab92a66d313 Patch
https://git.kernel.org/stable/c/4b674dd69701c2e22e8e7770c1706a69f3b17269 Patch
https://git.kernel.org/stable/c/787163d19bc3cdc6ca4b96223f62208534d1cf6b Patch
https://git.kernel.org/stable/c/978e3d023256bfaf34a0033d40c94e8a8e70cf3c Patch
https://git.kernel.org/stable/c/ad6dd7a2bac86118985c7b3426e175b9d3c1ec4f Patch
https://git.kernel.org/stable/c/b5cd108143513e4498027b96ec4710702d186f11 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Oct 2025, 19:07

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1e29d829ad51d1472dd035487953a6724b56fc33 - () https://git.kernel.org/stable/c/1e29d829ad51d1472dd035487953a6724b56fc33 - Patch
References () https://git.kernel.org/stable/c/4ab7e453a3ee88c274cf97bee9487ab92a66d313 - () https://git.kernel.org/stable/c/4ab7e453a3ee88c274cf97bee9487ab92a66d313 - Patch
References () https://git.kernel.org/stable/c/4b674dd69701c2e22e8e7770c1706a69f3b17269 - () https://git.kernel.org/stable/c/4b674dd69701c2e22e8e7770c1706a69f3b17269 - Patch
References () https://git.kernel.org/stable/c/787163d19bc3cdc6ca4b96223f62208534d1cf6b - () https://git.kernel.org/stable/c/787163d19bc3cdc6ca4b96223f62208534d1cf6b - Patch
References () https://git.kernel.org/stable/c/978e3d023256bfaf34a0033d40c94e8a8e70cf3c - () https://git.kernel.org/stable/c/978e3d023256bfaf34a0033d40c94e8a8e70cf3c - Patch
References () https://git.kernel.org/stable/c/ad6dd7a2bac86118985c7b3426e175b9d3c1ec4f - () https://git.kernel.org/stable/c/ad6dd7a2bac86118985c7b3426e175b9d3c1ec4f - Patch
References () https://git.kernel.org/stable/c/b5cd108143513e4498027b96ec4710702d186f11 - () https://git.kernel.org/stable/c/b5cd108143513e4498027b96ec4710702d186f11 - Patch
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/plane: mover la comprobación de rango para format_count antes Si bien la comprobación para format_count > 64 en __drm_universal_plane_init() no debería verse afectada (es un WARN_ON), en su posición actual perderá la matriz plane->format_types y no podrá llamar a drm_mode_object_unregister(), lo que filtra el identificador modeset. Muévalo al inicio de la función para evitar asignar esos recursos en primer lugar.

26 Feb 2025, 06:37

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 06:37

Updated : 2025-10-14 19:07

NVD link : CVE-2021-47659

Mitre link : CVE-2021-47659

CVE.ORG link : CVE-2021-47659

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo