CVE-2021-47063
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-47063
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47063.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-47063
- Related
- Published
- 2024-02-29T23:15:07Z
- Modified
- 2024-09-18T01:00:21Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm: bridge/panel: Cleanup connector on bridge detach
If we don't call drmconnectorcleanup() manually in panelbridgedetach(), the connector will be cleaned up with the other DRM objects in the call to drmmodeconfigcleanup(). However, since our drmconnector is devm-allocated, by the time drmmodeconfig_cleanup() will be called, our connector will be long gone. Therefore, the connector must be cleaned up when the bridge is detached to avoid use-after-free conditions.
v2: Cleanup connector only if it was created
v3: Add FIXME
v4: (Use connector->dev) directly in if() block
- References
-
- https://git.kernel.org/stable/c/18149b420c9bd93c443e8d1f48a063d71d9f6aa1
- https://git.kernel.org/stable/c/4d906839d321c2efbf3fed4bc31ffd9ff55b75c0
- https://git.kernel.org/stable/c/98d7d76a74e48ec3ddf2e23950adff7edcab9327
- https://git.kernel.org/stable/c/ce450934a00cf896e648fde08d0bd1426653d7a2
- https://security-tracker.debian.org/tracker/CVE-2021-47063
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source