Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47659

drm/plane: Move range check for format_count earlier

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 in __drm_universal_plane_init() shouldn't be hit (it's a WARN_ON), in its current position it will then leak the plane->format_types array and fail to call drm_mode_object_unregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to < 4ab7e453a3ee88c274cf97bee9487ab92a66d313affected
  • e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to < 1e29d829ad51d1472dd035487953a6724b56fc33affected
  • e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to < b5cd108143513e4498027b96ec4710702d186f11affected
  • e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to < 978e3d023256bfaf34a0033d40c94e8a8e70cf3caffected
  • e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to < 787163d19bc3cdc6ca4b96223f62208534d1cf6baffected
  • e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to < ad6dd7a2bac86118985c7b3426e175b9d3c1ec4faffected
  • e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to < 4b674dd69701c2e22e8e7770c1706a69f3b17269affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 4.19.247 to ≤ 4.19.*unaffected
  • 5.4.198 to ≤ 5.4.*unaffected
  • 5.10.121 to ≤ 5.10.*unaffected
  • 5.15.46 to ≤ 5.15.*unaffected
  • 5.17.14 to ≤ 5.17.*unaffected
  • 5.18.3 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References