
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2021-47446 affects the Linux kernel's drm/msm/a4xx component. The vulnerability was discovered in the error handling functionality of a4xx_gpu_init() where incorrect error code handling could lead to system instability (Kernel Commit).
The vulnerability stems from two key issues in the error handling code: 1) The code returns 1 on error instead of a negative error code, which leads to an Oops in the caller, and 2) The condition check "if (ret != -ENODATA)" cannot be true because "ret" is set to 1. This vulnerability was introduced by commit 5785dd7a8ef0 ("drm/msm: Fix duplicate gpu node in icc summary") (Kernel Commit).
When triggered, this vulnerability can cause a kernel oops, potentially leading to system instability or denial of service conditions (Kernel Commit).
The issue has been fixed in the Linux kernel through a patch that properly handles error codes in the a4xx_gpu_init() function. The fix includes correcting the error return values and properly handling the PTR_ERR cases (Kernel Commit).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."