PT-2025-7968 · Linux+4 · Linux Kernel+4

Syzbot · Published 2022-11-08 · Updated 2025-04-14 · CVE-2021-47657

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the drm/virtio component. The issue arises when the virtio gpu object shmem init() function fails, potentially due to fault injection, which can lead to virtio gpu array put free() being called with objs equal to NULL. To prevent this, a check has been added to ensure objs is not NULL in virtio gpu array put free().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CESA-2022_7683

CVE-2021-47657

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1327

• https://nvd.nist.gov/vuln/detail/CVE-2021-47657 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47657 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/abc9ad36df16e27ac1c665085157f1a082d39bac · Patch
• https://ubuntu.com/security/CVE-2021-47657 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47657 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47657 · Vendor Advisory
• https://git.kernel.org/stable/c/b094fece3810c71ceee6f0921676cb65d4e68c5a · Patch
• https://git.kernel.org/stable/c/6b79f96f4a23846516e5e6e4dd37fc06f43a60dd · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ac92b474eeeed75b8660374ba1d129a121c09da8 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47657 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47657 · Vendor Advisory