CVE-2021-47165

drm/meson: fix shutdown crash when component not probed

MEDIUM
5.5
CVSS Score
Published: March 25, 2024 at 09:16 AM UTC
Updated: June 17, 2026 at 04:16 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix shutdown crash when component not probed When main component is not probed, by example when the dw-hdmi module is not loaded yet or in probe defer, the following crash appears on shutdown: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000038 ... pc : meson_drv_shutdown+0x24/0x50 lr : platform_drv_shutdown+0x20/0x30 ... Call trace: meson_drv_shutdown+0x24/0x50 platform_drv_shutdown+0x20/0x30 device_shutdown+0x158/0x360 kernel_restart_prepare+0x38/0x48 kernel_restart+0x18/0x68 __do_sys_reboot+0x224/0x250 __arm64_sys_reboot+0x24/0x30 ... Simply check if the priv struct has been allocated before using it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 5.11.74.14.226 ≤ v < 4.14.2354.19.181 ≤ v < 4.19.1935.10.24 ≤ v < 5.10.425.11.7 ≤ v < 5.125.12 ≤ v < 5.12.95.12 ≤ v < 5.135.4.106 ≤ v < 5.4.1244.14.2264.19.1815.10.245.11.75.13 rc15.13 rc25.13 rc35.4.1068a5160cc8488776ddc48ea045860dab015f473908fbbf2b3849419e31731902d7478b0c934732632cef14d5d92f14a6e282c3216c2da63e05f14758ad2100ef32a8cfd024bad94f4fbc5e53d40d2b3dad4ec1ffbdaa8939a208656e9c1440742c457ef16fa0c16caf3d73ab4d2e5d6fa2ef2394dbec91791
Vendor states this is fixed in 4ce2bf20b4a6e307e114847d60b2bf40a6a1fac0 (fixed)
Vendor states this is fixed in 7cfc4ea78fc103ea51ecbacd9236abb5b1c490d2 (fixed)
Vendor states this is fixed in b4298d33c1fcce511ffe84d8d3de07e220300f9b (fixed)
Vendor states this is fixed in b4b91033a0b11fe9ade58156cd9168f89f4a8c1a (fixed)
Vendor states this is fixed in d66083c0d6f5125a4d982aa177dd71ab4cd3d212 (fixed)
Vendor states this is fixed in e256a0eb43e17209e347409a80805b1659398d68 (fixed)
Vendor states this is fixed in 4.14.235 (unaffected)
Vendor states this is fixed in 4.19.193 (unaffected)
Vendor states this is fixed in 5.10.42 (unaffected)
Vendor states this is fixed in 5.12 (unaffected)
Vendor states this is fixed in 5.12.9 (unaffected)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 5.4.124 (unaffected)

References (6)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4ce2bf20b4a6e307e114847d60b2bf40a6a1fac0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7cfc4ea78fc103ea51ecbacd9236abb5b1c490d2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b4298d33c1fcce511ffe84d8d3de07e220300f9b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b4b91033a0b11fe9ade58156cd9168f89f4a8c1a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d66083c0d6f5125a4d982aa177dd71ab4cd3d212
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e256a0eb43e17209e347409a80805b1659398d68

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card