CVE-2021-47108

Summary

CVE-2021-47108 is a vulnerability affecting the Linux kernel's Mediatek HDMI driver. Specifically, in the handling of the mtk_hdmi_bridge_mode_valid() function, a NULL pointer check for the hdmi->conf structure is missing. This oversight can lead to a kernel panic when a HDMI cable is connected to systems with MT8173 chips. The issue was introduced with the commits 41ca9caaae0b and c91026a938c2, which added checks for CEA modes and optional limits on maximal HDMI mode clocks, respectively. To mitigate this issue, a NULL pointer check for hdmi->conf is required in the mtk_hdmi_bridge_mode_valid() function.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.