CVE-2021-47657 Information

Description

In the Linux kernel the following vulnerability has been resolved:

drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

If virtio_gpu_object_shmem_init() fails (e.g. due to fault injection as it happened in the bug report by syzbot) virtio_gpu_array_put_free() could be called with objs equal to NULL.

Ensure that objs is not NULL in virtio_gpu_array_put_free() or otherwise return from the function.

Reference

https://git.kernel.org/stable/c/6b79f96f4a23846516e5e6e4dd37fc06f43a60dd https://git.kernel.org/stable/c/abc9ad36df16e27ac1c665085157f1a082d39bac https://git.kernel.org/stable/c/ac92b474eeeed75b8660374ba1d129a121c09da8 https://git.kernel.org/stable/c/b094fece3810c71ceee6f0921676cb65d4e68c5a