| The vulnerability, tracked as CVE-2021-47422, is a memory leak in the `drm/nouveau/kms/nv50` driver of the Linux kernel. Specifically, when using `single_open()` for opening files, `single_release()` should be called to release the allocated memory. If not done so, the memory allocated in `single_open()` will be leaked. |
| |
| The issue was introduced in Linux kernel version 5.9 with commit 12885ecbfe62 and has been fixed in versions 5.10.73 (commit 65fff0a8efcd), 5.14.12 (commit 0b4e9fc14973), and 5.15 (commit 0b3d4945cc7e). The affected file is `drivers/gpu/drm/nouveau/dispnv50/crc.c`. |
| |
| The Linux kernel CVE team recommends updating to the latest stable kernel version to fix this issue, as individual changes are not tested alone and cherry-picking commits is not supported. If updating is impossible, the individual fixes can be found at the provided commit links. |
| |
