Linux Kernel up to 5.18.2 __drm_universal_plane_init privilege escalation

Summaryinfo

A vulnerability described as problematic has been identified in Linux Kernel up to 5.18.2. This vulnerability affects the function __drm_universal_plane_init. Such manipulation leads to an unknown weakness. This vulnerability is traded as CVE-2021-47659. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.18.2. The impact remains unknown. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 in __drm_universal_plane_init() shouldn't be hit (it's a WARN_ON), in its current position it will then leak the plane->format_types array and fail to call drm_mode_object_unregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place.

The advisory is shared for download at git.kernel.org. This vulnerability is handled as CVE-2021-47659 since 02/26/2025. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 235744 (EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-1520)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 4.19.247, 5.4.198, 5.10.121, 5.15.46, 5.17.14 or 5.18.3 eliminates this vulnerability. Applying the patch 4ab7e453a3ee88c274cf97bee9487ab92a66d313/1e29d829ad51d1472dd035487953a6724b56fc33/b5cd108143513e4498027b96ec4710702d186f11/978e3d023256bfaf34a0033d40c94e8a8e70cf3c/787163d19bc3cdc6ca4b96223f62208534d1cf6b/ad6dd7a2bac86118985c7b3426e175b9d3c1ec4f/4b674dd69701c2e22e8e7770c1706a69f3b17269 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at Tenable (235744). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 4.19.246
• 5.4.197
• 5.10.120
• 5.15.0
• 5.15.1
• 5.15.2
• 5.15.3
• 5.15.4
• 5.15.5
• 5.15.6
• 5.15.7
• 5.15.8
• 5.15.9
• 5.15.10
• 5.15.11
• 5.15.12
• 5.15.13
• 5.15.14
• 5.15.15
• 5.15.16
• 5.15.17
• 5.15.18
• 5.15.19
• 5.15.20
• 5.15.21
• 5.15.22
• 5.15.23
• 5.15.24
• 5.15.25
• 5.15.26
• 5.15.27
• 5.15.28
• 5.15.29
• 5.15.30
• 5.15.31
• 5.15.32
• 5.15.33
• 5.15.34
• 5.15.35
• 5.15.36
• 5.15.37
• 5.15.38
• 5.15.39
• 5.15.40
• 5.15.41
• 5.15.42
• 5.15.43
• 5.15.44
• 5.15.45
• 5.17.0
• 5.17.1
• 5.17.2
• 5.17.3
• 5.17.4
• 5.17.5
• 5.17.6
• 5.17.7
• 5.17.8
• 5.17.9
• 5.17.10
• 5.17.11
• 5.17.12
• 5.17.13
• 5.18.0
• 5.18.1
• 5.18.2

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion