Riskcovery

CVE-2021-47649

udmabuf: validate ubuf->pagecount

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

udmabuf: validate ubuf->pagecount

Syzbot has reported GPF in sg_alloc_append_table_from_pages(). The problem was in ubuf->pages == ZERO_PTR.

ubuf->pagecount is calculated from arguments passed from user-space. If user creates udmabuf with list.size == 0 then ubuf->pagecount will be also equal to zero; it causes kmalloc_array() to return ZERO_PTR.

Fix it by validating ubuf->pagecount before passing it to kmalloc_array().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 5d50f851dd307c07ca5591297093f19967c834a9Affected
  • fbb0de795078190a9834b3409e4b009cfb18a6d4 to before b267a8118c2b171bf7d67b90ed64154eeab9fae0Affected
  • fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 811b667cefbea9cb7511a874b169d6a92907137eAffected
  • fbb0de795078190a9834b3409e4b009cfb18a6d4 to before a3728d32fc61eb0fe283cb8ff60b2c8f751e2202Affected
  • fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 9e9b4a269f84d3230f2af84ff42322db676440d9Affected
  • fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 2b6dd600dd72573c23ea180b5b0b2f1813405882Affected
LinuxLinux
  • 4.20Affected
  • before 4.20Not affected
  • 5.4.189 through 5.4.*Not affected
  • 5.10.110 through 5.10.*Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.