CVE-2021-47610 - CVE House

Back to Database

Status published Medium CVE-2021-47610

drm/msm: Fix null ptr access msm_ioctl_gem_submit()

5.5 CVSS

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null ptr access msm_ioctl_gem_submit() Fix the below null pointer dereference in msm_ioctl_gem_submit(): 26545.260705: Call trace: 26545.263223: kref_put+0x1c/0x60 26545.266452: msm_ioctl_gem_submit+0x254/0x744 26545.270937: drm_ioctl_kernel+0xa8/0x124 26545.274976: drm_ioctl+0x21c/0x33c 26545.278478: drm_compat_ioctl+0xdc/0xf0 26545.282428: __arm64_compat_sys_ioctl+0xc8/0x100 26545.287169: el0_svc_common+0xf8/0x250 26545.291025: do_el0_svc_compat+0x28/0x54 26545.295066: el0_svc_compat+0x10/0x1c 26545.298838: el0_sync_compat_handler+0xa8/0xcc 26545.303403: el0_sync_compat+0x188/0x1c0 26545.307445: Code: d503201f d503201f 52800028 4b0803e8 (b8680008) 26545.318799: Kernel panic - not syncing: Oops: Fatal exception

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47610

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux

View All →

drm/vkms: Convert to DRM's vblank timer

drm/panthor: Recover from panthor_gpu_flush_caches() failures

PCI: endpoint: Add missing NULL check for alloc_workqueue()

fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()

fs/ntfs3: Initialize new folios before use

Affected Vendor

Linux

View all reports →

Affected Software

Linux

Vulnerable Versions:

0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300, 3.12, 0, 5.15.10, 5.16

Timeline

Official Publish: June 19th, 2024

Last Modified: May 11th, 2026

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.