CVE-2021-47480

scsi: core: Put LLD module refcnt after SCSI device is released

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Put LLD module refcnt after SCSI device is released

SCSI host release is triggered when SCSI device is freed. We have to make
sure that the low-level device driver module won't be unloaded before SCSI
host instance is released because shost->hostt is required in the release
handler.

Make sure to put LLD module refcnt after SCSI device is released.

Fixes a kernel panic of 'BUG: unable to handle page fault for address'
reported by Changhui and Yi.

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: core: colocar el módulo LLD refcnt después de liberar el dispositivo SCSI. La liberación del host SCSI se activa cuando se libera el dispositivo SCSI. Tenemos que asegurarnos de que el módulo del controlador de dispositivo de bajo nivel no se descargue antes de que se lance la instancia del host SCSI porque se requiere shost->hostt en el controlador de lanzamiento. Asegúrese de poner el módulo LLD refcnt después de lanzar el dispositivo SCSI. Corrige un problema de pánico del kernel de 'ERROR: no se puede manejar el error de página para la dirección' informado por Changhui y Yi.

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-05-22 CVE Reserved
2024-05-22 CVE Published
2024-05-23 EPSS Updated
2024-09-11 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (8)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813	2021-11-12
https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428	2021-11-12
https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee	2021-11-12
https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0	2021-11-06
https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b	2021-11-06
https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f	2021-11-06
https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836	2021-11-06
https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f	2021-10-13

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.4.292 Search vendor "Linux" for product "Linux Kernel" and version " < 4.4.292"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.9.290 Search vendor "Linux" for product "Linux Kernel" and version " < 4.9.290"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.14.255 Search vendor "Linux" for product "Linux Kernel" and version " < 4.14.255"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.19.216 Search vendor "Linux" for product "Linux Kernel" and version " < 4.19.216"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.4.158 Search vendor "Linux" for product "Linux Kernel" and version " < 5.4.158"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.10.78 Search vendor "Linux" for product "Linux Kernel" and version " < 5.10.78"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.14.17 Search vendor "Linux" for product "Linux Kernel" and version " < 5.14.17"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.15 Search vendor "Linux" for product "Linux Kernel" and version " < 5.15"		en		Affected