CVE-2021-47659 — drm/plane: Move range check for format_count earlier
In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 in __drm_univers…
Published: 2025-02-26 · CVSS: Unscored
In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 in __drm_universal_plane_init() shouldn't be hit (it's a WARN_ON), in its current position it will then leak the plane->format_types array and fail to call drm_mode_object_unregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7