Riskcovery

CVE-2021-47063

drm: bridge/panel: Cleanup connector on bridge detach

State
Published
Severity
Not scored
Published
Feb 29, 2024
Updated
May 11, 2026
Reserved
Feb 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm: bridge/panel: Cleanup connector on bridge detach

If we don't call drm_connector_cleanup() manually in panel_bridge_detach(), the connector will be cleaned up with the other DRM objects in the call to drm_mode_config_cleanup(). However, since our drm_connector is devm-allocated, by the time drm_mode_config_cleanup() will be called, our connector will be long gone. Therefore, the connector must be cleaned up when the bridge is detached to avoid use-after-free conditions.

v2: Cleanup connector only if it was created

v3: Add FIXME

v4: (Use connector->dev) directly in if() block

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 13dfc0540a575b47b2d640b093ac16e9e09474f6 to before ce450934a00cf896e648fde08d0bd1426653d7a2Affected
  • 13dfc0540a575b47b2d640b093ac16e9e09474f6 to before 18149b420c9bd93c443e8d1f48a063d71d9f6aa1Affected
  • 13dfc0540a575b47b2d640b093ac16e9e09474f6 to before 98d7d76a74e48ec3ddf2e23950adff7edcab9327Affected
  • 13dfc0540a575b47b2d640b093ac16e9e09474f6 to before 4d906839d321c2efbf3fed4bc31ffd9ff55b75c0Affected
LinuxLinux
  • 4.13Affected
  • before 4.13Not affected
  • 5.10.37 through 5.10.*Not affected
  • 5.11.21 through 5.11.*Not affected
  • 5.12.4 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.