Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Paul Cercueil

#32907of 55,077
7.8Total CVSS
Vulnerabilities · 1
PT-2021-8002
7.8
2021-03-27
Linux · Linux Kernel · CVE-2021-47063
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the use of memory after it has been freed in the Direct Rendering Manager (DRM) subsystem of the Linux kernel. This occurs due to an incorrect cleanup procedure in the `drm connector cleanup()` function. If the `drm connector cleanup()` function is not called manually in `panel bridge detach()`, the connector will be cleaned up with other DRM objects in the call to `drm mode config cleanup()`. However, since the `drm connector` is devm-allocated, by the time `drm mode config cleanup()` is called, the connector will have already been removed, leading to use-after-free conditions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.