PT-2025-7970 · Linux+2 · Linux Kernel+2

Liviu Dudau + 2 · Published 2021-12-03 · Updated 2025-10-14 · CVE-2021-47659

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the drm universal plane init() function, where a check for format count > 64 is performed. If this condition is met, it can lead to a leak of the plane->format types array and a failure to call drm mode object unregister(), resulting in a leak of the modeset identifier. The fix involves moving the range check to the start of the function to prevent resource allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-402

Related Identifiers

BDU:2026-03810

CVE-2021-47659

OESA-2025-1336

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:01600-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1498

• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4b674dd69701c2e22e8e7770c1706a69f3b17269 · Patch
• https://git.kernel.org/stable/c/ad6dd7a2bac86118985c7b3426e175b9d3c1ec4f · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49292 · Security Note
• https://git.kernel.org/stable/c/1e29d829ad51d1472dd035487953a6724b56fc33 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49508 · Security Note
• https://git.kernel.org/stable/c/978e3d023256bfaf34a0033d40c94e8a8e70cf3c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49625 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49381 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-47659 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01600-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47659 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49535 · Security Note