CVE-2021-47659

drm/plane: Move range check for format_count earlier

State: Published
Severity: Not scored
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/plane: Move range check for format_count earlier

While the check for format_count > 64 in __drm_universal_plane_init() shouldn't be hit (it's a WARN_ON), in its current position it will then leak the plane->format_types array and fail to call drm_mode_object_unregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 4ab7e453a3ee88c274cf97bee9487ab92a66d313Affected e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 1e29d829ad51d1472dd035487953a6724b56fc33Affected e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before b5cd108143513e4498027b96ec4710702d186f11Affected e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 978e3d023256bfaf34a0033d40c94e8a8e70cf3cAffected e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 787163d19bc3cdc6ca4b96223f62208534d1cf6bAffected e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before ad6dd7a2bac86118985c7b3426e175b9d3c1ec4fAffected e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 4b674dd69701c2e22e8e7770c1706a69f3b17269Affected
LinuxLinux	4.14Affected before 4.14Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 4ab7e453a3ee88c274cf97bee9487ab92a66d313Affected
e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 1e29d829ad51d1472dd035487953a6724b56fc33Affected
e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before b5cd108143513e4498027b96ec4710702d186f11Affected
e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 978e3d023256bfaf34a0033d40c94e8a8e70cf3cAffected
e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 787163d19bc3cdc6ca4b96223f62208534d1cf6bAffected
e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before ad6dd7a2bac86118985c7b3426e175b9d3c1ec4fAffected
e6fc3b68558e4c6d8d160b5daf2511b99afa8814 to before 4b674dd69701c2e22e8e7770c1706a69f3b17269Affected

LinuxLinux

4.14Affected
before 4.14Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.