CVE-2021-47659

drm/plane: Move range check for format_count earlier

published February 26, 2025

CVSS
—
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/plane: Move range check for format_count earlier

While the check for format_count > 64 in __drm_universal_plane_init()

shouldn't be hit (it's a WARN_ON), in its current position it will then

leak the plane->format_types array and fail to call

drm_mode_object_unregister() leaking the modeset identifier. Move it to

the start of the function to avoid allocating those resources in the

first place.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.9th percentile
Published
2025-02-26T02:05Z
EPSS history
Timeline
  • 26 FEB 02:05Z
    drm/plane: Move range check for format_count earlier
    cvelistv5