NetSight
IP …
medium5.5

CVE-2021-47659

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 …

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 in __drm_universal_plane_init() shouldn't be hit (it's a WARN_ON), in its current position it will then leak the plane->format_types array and fail to call drm_mode_object_unregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.14 before 4.19.247
from 4.20 before 5.4.198
from 5.5 before 5.10.121
from 5.11 before 5.15.46
from 5.16 before 5.17.14
from 5.18 before 5.18.3

References