CVE-2021-47108
mediumpriority · track · 22EPSS 0.002 · 10 %ileDEEURUUSEPSS · scored 2026-10-28
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf In commit 41ca9caaae0b ("drm/mediatek: hdmi: Add check for CEA modes only") a check for CEA modes was added to function mtk_hdmi_bridge_mode_valid() in order to address possible issues on MT8167; moreover, with commit c91026a938c2 ("drm/mediatek: hdmi: Add optional limit on maximal HDMI mode clock") another similar check was introduced. Unfortunately though, at the time of writing, MT8173 does not provide any mtk_hdmi_conf structure and this is crashing the kernel with NULL pointer upon entering mtk_hdmi_bridge_mode_valid(), which happens as soon as a HDMI cable gets plugged in. To fix this regression, add a NULL pointer check for hdmi->conf in the said function, restoring HDMI functionality and avoiding NULL pointer kernel panics.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (22)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-0549Linux Kernel: Mehrere SchwachstellenDeutsch2024-03-04csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2021-47108/cnnvd
- https://git.kernel.org/stable/c/3b8e19a0aa3933a785be9f1541afd8d398c4ec69cnnvd
- https://git.kernel.org/stable/c/71d07ebc5000b9c1d140e99e7493b0bafa954776cnnvd
- https://vigilance.fr/vulnerability/Linux-kernel-multiple-vulnerabilities-dated-05-03-2024-43699cnnvd
- https://git.kernel.org/stable/c/3b8e19a0aa3933a785be9f1541afd8d398c4ec69enisa_euvd
- https://git.kernel.org/stable/c/71d07ebc5000b9c1d140e99e7493b0bafa954776enisa_euvd
- https://git.kernel.org/stable/c/3b8e19a0aa3933a785be9f1541afd8d398c4ec69Patchnvd
- https://git.kernel.org/stable/c/71d07ebc5000b9c1d140e99e7493b0bafa954776Patchnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan