CVE-2021-47108
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
04/03/2024
Last modified:
07/01/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf<br />
<br />
In commit 41ca9caaae0b<br />
("drm/mediatek: hdmi: Add check for CEA modes only") a check<br />
for CEA modes was added to function mtk_hdmi_bridge_mode_valid()<br />
in order to address possible issues on MT8167;<br />
moreover, with commit c91026a938c2<br />
("drm/mediatek: hdmi: Add optional limit on maximal HDMI mode clock")<br />
another similar check was introduced.<br />
<br />
Unfortunately though, at the time of writing, MT8173 does not provide<br />
any mtk_hdmi_conf structure and this is crashing the kernel with NULL<br />
pointer upon entering mtk_hdmi_bridge_mode_valid(), which happens as<br />
soon as a HDMI cable gets plugged in.<br />
<br />
To fix this regression, add a NULL pointer check for hdmi->conf in the<br />
said function, restoring HDMI functionality and avoiding NULL pointer<br />
kernel panics.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.14 (including) | 5.15.12 (excluding) |
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page