PT-2024-11260 · Linux+2 · Linux Kernel+2

Published 2021-06-02 · Updated 2024-12-30 · CVE-2021-47253

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential memory leak in the DMUB hw init function of the Linux kernel's drm/amd/display module. This leak occurs during suspend/resume scenarios due to the allocation of memory for the DC wrapper to DMUB without checking if it was already allocated. The memory leak happens because the dm resume function calls dm dmub hw init, which in turn calls dc dmub srv create and then kzalloc to allocate memory. To fix this, the memory for the DC wrapper to DMUB should only be allocated if it was not allocated before, eliminating the need to reallocate it on suspend/resume.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-07377

CVE-2021-47253

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 423

• https://git.kernel.org/stable/c/c5699e2d863f58221044efdc3fa712dd32d55cde · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47253 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47253 · Vendor Advisory
• https://git.kernel.org/stable/c/9e8c2af010463197315fa54a6c17e74988b5259c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://git.kernel.org/stable/c/aa000f828e60ac15d6340f606ec4a673966f5b0b · Patch
• https://cve.org/CVERecord?id=CVE-2021-47253 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47253 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47253 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47253 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07377 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47253 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-47329 · Note
• https://suse.com/security/cve/CVE-2024-27413 · Note