Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2021-47063: Linux kernel bridge panel cleanup can cause crash
CVE-2021-47063 · published 2 years ago
Summary
The Linux kernel packages for Canonical cloud and HWE releases may clean up a display connector incorrectly, leading to a use‑after‑free error that could crash the system. Updating to the latest kernel version from Canonical fixes the cleanup logic. Apply the newest kernel updates for your Linux‑HWE, Linux‑Azure, Linux‑AWS‑HWE, Linux‑GCP, or Linux‑HWE‑Edge installations as soon as possible.
What to do
- Update canonical linux-azure to version 4.15.0-1178.193~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1169.182~16.04.1.
- Update canonical linux-azure to version 4.15.0-1178.193~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1163.180~16.04.1.
- Update canonical linux-hwe to version 4.15.0-226.238~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1132.143~16.04.1.
- Update canonical linux to version 4.15.0-226.238.
- Update canonical linux-aws to version 4.15.0-1169.182.
- Update canonical linux-aws-5.4 to version 5.4.0-1126.136~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1178.193.
- Update canonical linux-azure-5.4 to version 5.4.0-1131.138~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1163.180.
- Update canonical linux-gcp-5.4 to version 5.4.0-1130.139~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-186.206~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1073.78~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1153.158.
- Update canonical linux-oracle to version 4.15.0-1132.143.
- Update canonical linux-oracle-5.4 to version 5.4.0-1125.134~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1110.122~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2108.114.
- Update canonical linux-azure-fips to version 4.15.0-2087.93.
- Update canonical linux-fips to version 4.15.0-1124.135.
- Update canonical linux-gcp-fips to version 4.15.0-2071.76.
- Update canonical linux to version 5.4.0-186.206.
- Update canonical linux-aws to version 5.4.0-1126.136.
- Update canonical linux-azure to version 5.4.0-1131.138.
- Update canonical linux-bluefield to version 5.4.0-1086.93.
- Update canonical linux-gcp to version 5.4.0-1130.139.
- Update canonical linux-gkeop to version 5.4.0-1093.97.
- Update canonical linux-ibm to version 5.4.0-1073.78.
- Update canonical linux-iot to version 5.4.0-1038.39.
- Update canonical linux-kvm to version 5.4.0-1114.121.
- Update canonical linux-oracle to version 5.4.0-1125.134.
- Update canonical linux-raspi to version 5.4.0-1110.122.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1045.49.
- Update canonical linux-aws-fips to version 5.4.0-1126.136+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1131.138+fips1.
- Update canonical linux-fips to version 5.4.0-1100.110.
- Update canonical linux-gcp-fips to version 5.4.0-1130.139+fips1.
- Update debian linux to version 5.10.38-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1178.193~14.04.1 Fix: upgrade to 4.15.0-1178.193~14.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1169.182~16.04.1 Fix: upgrade to 4.15.0-1169.182~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1178.193~16.04.1 Fix: upgrade to 4.15.0-1178.193~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1163.180~16.04.1 Fix: upgrade to 4.15.0-1163.180~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-226.238~16.04.1 Fix: upgrade to 4.15.0-226.238~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1132.143~16.04.1 Fix: upgrade to 4.15.0-1132.143~16.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-226.238 Fix: upgrade to 4.15.0-226.238
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1169.182 Fix: upgrade to 4.15.0-1169.182
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1126.136~18.04.1 Fix: upgrade to 5.4.0-1126.136~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1178.193 Fix: upgrade to 4.15.0-1178.193
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1131.138~18.04.1 Fix: upgrade to 5.4.0-1131.138~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1163.180 Fix: upgrade to 4.15.0-1163.180
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1130.139~18.04.1 Fix: upgrade to 5.4.0-1130.139~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-186.206~18.04.1 Fix: upgrade to 5.4.0-186.206~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1073.78~18.04.1 Fix: upgrade to 5.4.0-1073.78~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1153.158 Fix: upgrade to 4.15.0-1153.158
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1132.143 Fix: upgrade to 4.15.0-1132.143
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1125.134~18.04.1 Fix: upgrade to 5.4.0-1125.134~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1110.122~18.04.1 Fix: upgrade to 5.4.0-1110.122~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2108.114 Fix: upgrade to 4.15.0-2108.114
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2087.93 Fix: upgrade to 4.15.0-2087.93
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1124.135 Fix: upgrade to 4.15.0-1124.135
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2071.76 Fix: upgrade to 4.15.0-2071.76
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-186.206 Fix: upgrade to 5.4.0-186.206
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1126.136 Fix: upgrade to 5.4.0-1126.136
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1131.138 Fix: upgrade to 5.4.0-1131.138
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1086.93 Fix: upgrade to 5.4.0-1086.93
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1130.139 Fix: upgrade to 5.4.0-1130.139
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1093.97 Fix: upgrade to 5.4.0-1093.97
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1073.78 Fix: upgrade to 5.4.0-1073.78
|
Showing 50 of 119. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1038.39 Fix: upgrade to 5.4.0-1038.39
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1114.121 Fix: upgrade to 5.4.0-1114.121
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1125.134 Fix: upgrade to 5.4.0-1125.134
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1110.122 Fix: upgrade to 5.4.0-1110.122
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1045.49 Fix: upgrade to 5.4.0-1045.49
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1126.136+fips2 Fix: upgrade to 5.4.0-1126.136+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1131.138+fips1 Fix: upgrade to 5.4.0-1131.138+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1100.110 Fix: upgrade to 5.4.0-1100.110
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1130.139+fips1 Fix: upgrade to 5.4.0-1130.139+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| Debian:12 | debian | linux |
< 5.10.38-1 Fix: upgrade to 5.10.38-1
|
| Debian:13 | debian | linux |
< 5.10.38-1 Fix: upgrade to 5.10.38-1
|
| Debian:14 | debian | linux |
< 5.10.38-1 Fix: upgrade to 5.10.38-1
|
| – | linux | linux_kernel |
>= 4.13, < 5.10.37 >= 5.11, < 5.11.21 >= 5.12, < 5.12.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drm_connector_cleanup() manually in panel_bridge_detach(...
In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drm_connector_cleanup() manually in panel_bridge_detach(), the connector will be cleaned up with the other DRM objects in the call to drm_mode_config_cleanup(). However, since our drm_connector is devm-allocated, by the time drm_mode_config_cleanup() will be called, our connector will be long gone. Therefore, the connector must be cleaned up when the bridge is detached to avoid use-after-free conditions. v2: Cleanup connector only if it was created v3: Add FIXME v4: (Use connector->dev) directly in if() block
References
- https://security-tracker.debian.org/tracker/CVE-2021-47063 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6866-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6867-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2021-47063 Third Party Advisory
- https://git.kernel.org/linus/4d906839d321c2efbf3fed4bc31ffd9ff55b75c0 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-47063 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6831-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6866-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6866-3 Vendor Advisory
- https://git.kernel.org/stable/c/18149b420c9bd93c443e8d1f48a063d71d9f6aa1 Patch
- https://git.kernel.org/stable/c/4d906839d321c2efbf3fed4bc31ffd9ff55b75c0 Patch
- https://git.kernel.org/stable/c/98d7d76a74e48ec3ddf2e23950adff7edcab9327 Patch
- https://git.kernel.org/stable/c/ce450934a00cf896e648fde08d0bd1426653d7a2 Patch
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-416Use After Free
Timeline
Published29 Feb 2024
Updated4 Nov 2026
First seen12 May 2026
Track software like this
Free during beta