CVE-2021-47328

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the Linux kernel's iSCSI subsystem. If a unbind target call has not been made, there is a potential race condition where iscsi conn teardown wakes up the EH thread and frees the connection while other threads are still accessing it. To resolve this, the TMF fields are moved from the connection to the session, allowing the iscsi session teardown call to remove the target and its devices, ensuring no further access to the session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.