CVE-2021-47657
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-47657
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-47657.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-47657
- Related
- Published
- 2025-02-26T06:37:07Z
- Modified
- 2025-03-18T18:50:28Z
- Downstream
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: Ensure that objs is not NULL in virtiogpuarrayputfree()
If virtiogpuobjectshmeminit() fails (e.g. due to fault injection, as it happened in the bug report by syzbot), virtiogpuarrayputfree() could be called with objs equal to NULL.
Ensure that objs is not NULL in virtiogpuarrayputfree(), or otherwise return from the function.
- References
-
- https://git.kernel.org/stable/c/6b79f96f4a23846516e5e6e4dd37fc06f43a60dd
- https://git.kernel.org/stable/c/abc9ad36df16e27ac1c665085157f1a082d39bac
- https://git.kernel.org/stable/c/ac92b474eeeed75b8660374ba1d129a121c09da8
- https://git.kernel.org/stable/c/b094fece3810c71ceee6f0921676cb65d4e68c5a
- https://security-tracker.debian.org/tracker/CVE-2021-47657
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source