CVE-2021-47042: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47042 is a memory leak vulnerability in the Linux kernel's AMD display driver component, specifically in the dc_link_construct() function. The vulnerability was discovered in the Linux kernel versions from 5.12 up to (excluding) 5.12.4. The issue occurs in the drm/amd/display module during AMD module loading process (NVD).

The vulnerability is classified as CWE-401 (Missing Release of Memory after Effective Lifetime) with a CVSS v3.1 Base Score of 5.5 (Medium). The issue manifests as an unreferenced object of size 1024 bytes in the amd_module_load process, specifically during the dc_link_construct() function execution. The vulnerability stems from a failure to free local data after use, which was introduced in the commit that moved local data from stack to heap (Kernel Patch).

The memory leak can lead to resource exhaustion over time, potentially affecting system stability and performance. The vulnerability requires local access and low privileges to exploit, with the primary impact being on system availability (NVD).

The vulnerability requires local access with low privileges to exploit. There are no known public exploits targeting this vulnerability in the wild (NVD).

The vulnerability has been patched in the Linux kernel. The fix involves adding a proper memory deallocation call (kfree(info)) after the successful execution of the dc_link_construct function. Users should upgrade to Linux kernel version 5.12.4 or later which contains the fix (Kernel Patch).