CVE-2021-47046

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix off by one in hdmi_14_process_transaction()

The hdcp_i2c_offsets[] array did not have an entry for HDCP_MESSAGE_ID_WRITE_CONTENT_STREAM_TYPE so it led to an off by one read overflow. I added an entry and copied the 0x0 value for the offset from similar code in drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c.

I also declared several of these arrays as having HDCP_MESSAGE_ID_MAX entries. This doesn't change the code, but it's just a belt and suspenders approach to try future proof the code.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-193

Affected software

VendorProductVersions
LinuxLinux>= 4c283fdac08abf3211533f70623c90a34f41d08d, < 403c4528e5887af3deb9838cb77a557631d1e138; >= 4c283fdac08abf3211533f70623c90a34f41d08d, < 6a58310d5d1e5b02d0fc9b393ba540c9367bced5; >= 4c283fdac08abf3211533f70623c90a34f41d08d, < 080bd41d6478a64edf96704fddcda52b1fd5fed7; >= 4c283fdac08abf3211533f70623c90a34f41d08d, < 8e6fafd5a22e7a2eb216f5510db7aab54cc545c1
LinuxLinux5.5

References

Timeline

Published
Feb 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-470475.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails The spi CVE-2021-470487.8In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When CVE-2021-470497.8In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" vCVE-2021-470505.5In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix possible NULL pointer dereference of resourCVE-2021-470515.5In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() CVE-2021-470525.5In the Linux kernel, the following vulnerability has been resolved: crypto: sa2ul - Fix memory leak of rxd There are two error return pathCVE-2021-470535.5In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of pad It appears there are severalCVE-2021-470545.5In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child node before return tCVE-2021-470555.5In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCKCVE-2021-470565.5In the Linux kernel, the following vulnerability has been resolved: crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init ACVE-2021-470575.5In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to mapCVE-2021-470587.8In the Linux kernel, the following vulnerability has been resolved: regmap: set debugfs_name to NULL after it is freed There is a upstream
CVE-2021-47046: High severity, CVSS 7.8 | Vulnix