CVE-2021-47657

If virtiogpuobjectshmeminit() fails (e.g. due to fault injection, as it happened in the bug report by syzbot), virtiogpuarrayputfree() could be called with objs equal to NULL.

Ensure that objs is not NULL in virtiogpuarrayputfree(), or otherwise return from the function.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "5.11.20"
            },
            {
                "fixed": "5.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.12.3"
            },
            {
                "fixed": "5.15.32"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.16"
            },
            {
                "fixed": "5.16.18"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.17"
            },
            {
                "fixed": "5.17.1"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47657.json"