In the Linux kernel, the following vulnerability has been resolved: drm:
bridge/panel: Cleanup connector on bridge detach If we don’t call
drm_connector_cleanup() manually in panel_bridge_detach(), the connector
will be cleaned up with the other DRM objects in the call to
drm_mode_config_cleanup(). However, since our drm_connector is
devm-allocated, by the time drm_mode_config_cleanup() will be called, our
connector will be long gone. Therefore, the connector must be cleaned up
when the bridge is detached to avoid use-after-free conditions. v2: Cleanup
connector only if it was created v3: Add FIXME v4: (Use connector->dev)
directly in if() block
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | < 4.15.0-226.238 | UNKNOWN |
ubuntu | 20.04 | noarch | linux | < 5.4.0-186.206 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | < 4.15.0-1169.182 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < 5.4.0-1126.136 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws-5.4 | < 5.4.0-1126.136~18.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-aws-hwe | < 4.15.0-1169.182~16.04.1 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | < 5.4.0-1131.138 | UNKNOWN |
ubuntu | 14.04 | noarch | linux-azure | < any | UNKNOWN |
ubuntu | 16.04 | noarch | linux-azure | < 4.15.0-1178.193~16.04.1 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-azure-4.15 | < 4.15.0-1178.193 | UNKNOWN |
git.kernel.org/linus/4d906839d321c2efbf3fed4bc31ffd9ff55b75c0 (5.13-rc1)
launchpad.net/bugs/cve/CVE-2021-47063
nvd.nist.gov/vuln/detail/CVE-2021-47063
security-tracker.debian.org/tracker/CVE-2021-47063
ubuntu.com/security/notices/USN-6831-1
ubuntu.com/security/notices/USN-6866-1
ubuntu.com/security/notices/USN-6866-2
ubuntu.com/security/notices/USN-6867-1
www.cve.org/CVERecord?id=CVE-2021-47063