Riskcovery

CVE-2021-47471

drm: mxsfb: Fix NULL pointer dereference crash on unload

State
Published
Severity
5.5 Medium
Published
May 22, 2024
Updated
May 11, 2026
Reserved
May 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm: mxsfb: Fix NULL pointer dereference crash on unload

The mxsfb->crtc.funcs may already be NULL when unloading the driver, in which case calling mxsfb_irq_disable() via drm_irq_uninstall() from mxsfb_unload() leads to NULL pointer dereference.

Since all we care about is masking the IRQ and mxsfb->base is still valid, just use that to clear and mask the IRQ.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • ae1ed0093281939b80664a687689f12436c0e874 to before f40c2281d2c0674d32ba732fee45222d76495472Affected
  • ae1ed0093281939b80664a687689f12436c0e874 to before b0e6db0656ddfd8bb57303c2ef61ee1c1cc694a8Affected
  • ae1ed0093281939b80664a687689f12436c0e874 to before 3cfc183052c3dbf8eae57b6c1685dab00ed3db4aAffected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.76 through 5.10.*Not affected
  • 5.14.15 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.