CVE - CVE-2021-47649

CVE-ID
CVE-2021-47649	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf->pagecount Syzbot has reported GPF in sg_alloc_append_table_from_pages(). The problem was in ubuf->pages == ZERO_PTR. ubuf->pagecount is calculated from arguments passed from user-space. If user creates udmabuf with list.size == 0 then ubuf->pagecount will be also equal to zero; it causes kmalloc_array() to return ZERO_PTR. Fix it by validating ubuf->pagecount before passing it to kmalloc_array().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2b6dd600dd72573c23ea180b5b0b2f1813405882 URL:https://git.kernel.org/stable/c/2b6dd600dd72573c23ea180b5b0b2f1813405882 MISC:https://git.kernel.org/stable/c/5d50f851dd307c07ca5591297093f19967c834a9 URL:https://git.kernel.org/stable/c/5d50f851dd307c07ca5591297093f19967c834a9 MISC:https://git.kernel.org/stable/c/811b667cefbea9cb7511a874b169d6a92907137e URL:https://git.kernel.org/stable/c/811b667cefbea9cb7511a874b169d6a92907137e MISC:https://git.kernel.org/stable/c/9e9b4a269f84d3230f2af84ff42322db676440d9 URL:https://git.kernel.org/stable/c/9e9b4a269f84d3230f2af84ff42322db676440d9 MISC:https://git.kernel.org/stable/c/a3728d32fc61eb0fe283cb8ff60b2c8f751e2202 URL:https://git.kernel.org/stable/c/a3728d32fc61eb0fe283cb8ff60b2c8f751e2202 MISC:https://git.kernel.org/stable/c/b267a8118c2b171bf7d67b90ed64154eeab9fae0 URL:https://git.kernel.org/stable/c/b267a8118c2b171bf7d67b90ed64154eeab9fae0
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)