CVE-2021-47328
Linux Kernel use-after-free
- Published21 May 2024
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix conn use after free during resets If we haven't done a unbind target call we can race where iscsi_conn_teardown wakes up the EH thread and then frees the conn while those threads are still accessing the conn ehwait. We can only do one TMF per session so this just moves the TMF fields from the conn to the session. We can then rely on the iscsi_session_teardown->iscsi_remove_session->__iscsi_unbind_session call to remove the target and it's devices, and know after that point there is no device or scsi-ml callout trying to access the session.
CVSS 3.1 breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAffected products
Remediation
- https://git.kernel.org/stable/c/89812e7957ab0746eab66ed6fc49d52bb4dca250
- https://git.kernel.org/stable/c/bf20d85a88384574fabb3d53ad62a8af57e7ab11
- https://git.kernel.org/stable/c/d04958a348e560938410e04a12fb99da9c7e6a00
- https://git.kernel.org/stable/c/ec29d0ac29be366450a7faffbcf8cba3a6a3b506
- https://git.kernel.org/stable/c/f0a031f7c55ffd944fead1ddaf2aa94df9a158c1
- https://git.kernel.org/stable/c/fa9542b35ceb4202e8f8d65f440529a63524dca9
References
- https://git.kernel.org/stable/c/89812e7957ab0746eab66ed6fc49d52bb4dca250
- https://git.kernel.org/stable/c/bf20d85a88384574fabb3d53ad62a8af57e7ab11
- https://git.kernel.org/stable/c/d04958a348e560938410e04a12fb99da9c7e6a00
- https://git.kernel.org/stable/c/ec29d0ac29be366450a7faffbcf8cba3a6a3b506
- https://git.kernel.org/stable/c/f0a031f7c55ffd944fead1ddaf2aa94df9a158c1
- https://git.kernel.org/stable/c/fa9542b35ceb4202e8f8d65f440529a63524dca9
Related CVEs
Recent high-severity vulnerabilities sharing a weakness type.
Frequently asked
Is CVE-2021-47328 being actively exploited?
CVE-2021-47328 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.77%.
How severe is CVE-2021-47328?
CVE-2021-47328 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 0.77% probability of exploitation.
Which products are affected by CVE-2021-47328?
Affected products include Linux Kernel.
How do I fix CVE-2021-47328?
Upgrade affected software to a fixed version, for example Linux Kernel 5.4.134 or later, then confirm no affected versions remain in your inventory.
How Secuno handles this
Secuno correlates vulnerabilities like CVE-2021-47328 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.
Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.