CVE-2021-47203

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a list corruption vulnerability in the Linux kernel's lpfc driver. When the driver attempts to pass requests to the adapter and fails, a local fail msg string is set, and a log message is output. The job is then added to a completions list for cancellation. However, since fail msg remains set, subsequent jobs are added to the completions list regardless of whether a wqe was passed to the adapter, resulting in list corruption. The fix involves clearing the fail msg string after adding a job to the completions list. This prevents subsequent jobs from being added to the completions list unless they had an appropriate failure. The vulnerability may allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.