In the Linux kernel, the following vulnerability has been resolved:
drm/plane: Move range check for format_count earlier
While the check for format_count > 64 in __drmuniversalplaneinit() shouldn't be hit (it's a WARNON), in its current position it will then leak the plane->formattypes array and fail to call drmmodeobjectunregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-47659.json"
[
{
"events": [
{
"introduced": "4.14"
},
{
"fixed": "4.19.247"
}
]
},
{
"events": [
{
"introduced": "4.20"
},
{
"fixed": "5.4.198"
}
]
},
{
"events": [
{
"introduced": "5.5"
},
{
"fixed": "5.10.121"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.15.46"
}
]
},
{
"events": [
{
"introduced": "5.16"
},
{
"fixed": "5.17.14"
}
]
},
{
"events": [
{
"introduced": "5.18"
},
{
"fixed": "5.18.3"
}
]
}
]