CVE-2021-47534

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47534
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Add missing drm_crtc_commit_put Commit 9ec03d7f1ed3 ("drm/vc4: kms: Wait on previous FIFO users before a commit") introduced a global state for the HVS, with each FIFO storing the current CRTC commit so that we can properly synchronize commits. However, the refcounting was off and we thus ended up leaking the drm_crtc_commit structure every commit. Add a drm_crtc_commit_put to prevent the leakage.

4.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2 Patch
https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124 Patch
https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2 Patch
https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
History

01 Apr 2025, 18:41

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2 - () https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2 - Patch
References () https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124 - () https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124 - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2 - () https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2 -
References () https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124 - () https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124 -

07 Nov 2024, 17:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/vc4: kms: agregar drm_crtc_commit_put faltante el commit 9ec03d7f1ed3 ("drm/vc4: kms: esperar a los usuarios FIFO anteriores antes de una confirmación") introdujo un estado global para HVS, con cada FIFO almacena El commit CRTC actual para que podamos sincronizar correctamente las confirmaciones. Sin embargo, el recuento no se realizó y, por lo tanto, terminamos filtrando la estructura drm_crtc_commit en cada confirmación. Agregue un drm_crtc_commit_put para evitar la fuga.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.1

24 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-24 15:15

Updated : 2025-04-01 18:41

NVD link : CVE-2021-47534

Mitre link : CVE-2021-47534

CVE.ORG link : CVE-2021-47534

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other