Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47480

scsi: core: Put LLD module refcnt after SCSI device is released

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered when SCSI device is freed. We have to make sure that the low-level device driver module won't be unloaded before SCSI host instance is released because shost->hostt is required in the release handler. Make sure to put LLD module refcnt after SCSI device is released. Fixes a kernel panic of 'BUG: unable to handle page fault for address' reported by Changhui and Yi.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < 1105573d964f7b78734348466b01f5f6ba8a1813affected
  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < 8e4814a461787e15a31d322d9efbe0d4f6822428affected
  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < 61a0faa89f21861d1f8d059123b5c285a5d9ffeeaffected
  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < c2df161f69fb1c67f63adbd193368b47f511edc0affected
  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < 1ce287eff9f23181d5644db787f472463a61f68baffected
  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < 7b57c38d12aed1b5d92f74748bed25e0d041729faffected
  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < f30822c0b4c35ec86187ab055263943dc71a6836affected
  • 65110b2168950a19cc78b5027ed18cb811fbdae8 to < f2b85040acec9a928b4eb1b57a989324e8e38d3faffected

Linux Linux

Default version status: affected

  • 2.6.16affected
  • 0 to < 2.6.16unaffected
  • 4.4.292 to ≤ 4.4.*unaffected
  • 4.9.290 to ≤ 4.9.*unaffected
  • 4.14.255 to ≤ 4.14.*unaffected
  • 4.19.216 to ≤ 4.19.*unaffected
  • 5.4.158 to ≤ 5.4.*unaffected
  • 5.10.78 to ≤ 5.10.*unaffected
  • 5.14.17 to ≤ 5.14.*unaffected
  • 5.15 to ≤ *unaffected

References