CVE-2021-47532: drm/msm/devfreq: Fix OPP refcnt leak

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates local access and low privileges are required. No user interaction is required.

Q: What is the expected security impact?

The reported impact is high availability impact, with no confidentiality or integrity impact indicated by the CVSS vector.

Q: Is a fix available?

Yes. A patch is available, with stable kernel commit references provided.

Published May 24, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/devfreq: Fix OPP refcnt leak

Affected Software

4 affected components

Linux Linux kernel>=5.15<5.15.7

Linux Linux kernel=5.16-rc1

Linux Linux kernel=5.16-rc2

Linux Linux kernel=5.16-rc3

Remediation

Patch Available

https://git.kernel.org/stable/c/59ba1b2b4825342676300f66d785764be3fcb093

Patch Available

https://git.kernel.org/stable/c/a4eb55901df1dce8c6944438bbdf57caf08911e2

Event History

May 24, 2024

CVE Published

via MITRE·03:09 PM

Data Sourced

via MITRE·03:09 PM

Description

Data Sourced

via NVD·03:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates local access and low privileges are required. No user interaction is required.

What is the expected security impact?

The reported impact is high availability impact, with no confidentiality or integrity impact indicated by the CVSS vector.

Is a fix available?

Yes. A patch is available, with stable kernel commit references provided.

CVE-2021-47532: drm/msm/devfreq: Fix OPP refcnt leak

Affected Software

Remediation

Patch Available

Patch Available

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected security impact?

Is a fix available?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected security impact?

Is a fix available?