Bug 2348201 (CVE-2021-47657) - CVE-2021-47657 kernel: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
Summary: CVE-2021-47657 kernel: drm/virtio: Ensure that objs is not NULL in virtio_gpu...
Keywords:
Status: NEW
Alias: CVE-2021-47657
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-02-26 03:21 UTC by OSIDB Bzimport
Modified: 2025-04-07 13:05 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-02-26 03:21:09 UTC 
In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

If virtio_gpu_object_shmem_init() fails (e.g. due to fault injection, as it
happened in the bug report by syzbot), virtio_gpu_array_put_free() could be
called with objs equal to NULL.

Ensure that objs is not NULL in virtio_gpu_array_put_free(), or otherwise
return from the function.
Comment 3 Avinash Hanwate 2025-02-26 18:36:15 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022650-CVE-2021-47657-6f3d@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.