7.8

CVE-2021-47142: drm/amdgpu: Fix a use-after-free

Modified
AliasesUBUNTU-CVE-2021-47142DEBIAN-CVE-2021-47142
Published 25-03-2024Last modified 05-08-2026

Vulnerability summary

CVE-2021-47142 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.5% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 8
SUSE-SU-2024:1454-1SUSE-SU-2024:1465-1SUSE-SU-2024:1489-1SUSE-SU-2024:1643-1SUSE-SU-2024:1646-1SUSE-SU-2024:1870-1

Timeline

  1. 25-03-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm->sg to NULL. Hit panic below [ 1235.844104] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 [#1] SMP DEBUG_PAGEALLOC NOPTI [ 1235.989074] Call Trace: [ 1235.991751] sg_free_table+0x17/0x20 [ 1235.995667] amdgpu_ttm_backend_unbind.cold+0x4d/0xf7 [amdgpu] [ 1236.002288] amdgpu_ttm_backend_destroy+0x29/0x130 [amdgpu] [ 1236.008464] ttm_tt_destroy+0x1e/0x30 [ttm] [ 1236.013066] ttm_bo_cleanup_memtype_use+0x51/0xa0 [ttm] [ 1236.018783] ttm_bo_release+0x262/0xa50 [ttm] [ 1236.023547] ttm_bo_put+0x82/0xd0 [ttm] [ 1236.027766] amdgpu_bo_unref+0x26/0x50 [amdgpu] [ 1236.032809] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0x7aa/0xd90 [amdgpu] [ 1236.040400] kfd_ioctl_alloc_memory_of_gpu+0xe2/0x330 [amdgpu] [ 1236.046912] kfd_ioctl+0x463/0x690 [amdgpu]

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.24% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu86 products
  • linux< 4.4.0-279.313 | < 4.15.0-151.157 | < 5.4.0-80.90
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1153.159 | < 4.4.0-1191.206 | < 4.15.0-1109.116 | < 5.4.0-1054.57
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 0707c3fea8102d211631ba515ef2159707561b0d | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 3293cf3513d69f00c14d43e2020826d45ea0e46a | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 952ab3f9f48eb0e8050596d41951cf516be6b122 | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < a849e218556f932576c0fb1c5a88714b61709a17 | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 7398c2aab4da960761ec182d04d6d5abbb4a226e | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < f98cdf084405333ee2f5be548a91b2d168e49276 | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < d4ea141fd4b40636a8326df5a377d9c5cf9b3faa | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 1e5c37385097c35911b0f8a0c67ffd10ee1af9a2 | 4.2
  • linux_kernel< 4.4.271 | ≥ 4.9.0, < 4.9.271 | ≥ 4.14.0, < 4.14.235 | ≥ 4.19.0, < 4.19.193 | ≥ 5.4.0, < 5.4.124 | ≥ 5.10.0, < 5.10.42 | ≥ 5.12.0, < 5.12.9 | 5.13:rc1 | 5.13:rc2
Debian1 product
  • linux< 5.14.6-1

3 vendors · 89 products

References

13 links
Show all 13 references