← Back to CVEs

CVE-2021-47480

MEDIUM

5.5

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered when SCSI device is freed. We have to make sure that the low-level device driver module won't be unloaded before SCSI host instance is released because shost->hostt is required in the release handler. Make sure to put LLD module refcnt after SCSI device is released. Fixes a kernel panic of 'BUG: unable to handle page fault for address' reported by Changhui and Yi.

CVE Details

CVSS v3.1 Score5.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published5/22/2024

Last Modified9/29/2025

Sourcenvd

Honeypot Sightings0

Affected Products

linux:linux_kernel

References

https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.