What’s Vulnerable › Vulnerabilities

CVE-2021-47534: drm/vc4: kms: Add missing drm_crtc_commit_put

• Severity: medium (CVSS 4.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Add missing drm_crtc_commit_put Commit 9ec03d7f1ed3 ("drm/vc4: kms: Wait on previous FIFO users before a commit") introduced a global state for the HVS, with each FIFO storing the current CRTC commit so that we can properly synchronize commits. However, the refcounting was off and we thus ended up leaking the drm_crtc_commit structure every commit. Add a drm_crtc_commit_put to prevent the leakage.

Affected products

• Linux kernel: from 5.12 before 5.15.7; 5.16-rc1, 5.16-rc2, 5.16-rc3 — fixed in 5.15.7

How to fix

Upgrade to a fixed version: Linux kernel 5.15.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2
• https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124
• https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2
• https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124

Get alerted when CVE-2021-47534 or the next vulnerability affects your stack