PT-2024-11468
CVE-2021-47480
·
Published
2021-10-08
·
Updated
2024-06-25
Description by
CVSS 2.0
5.9
MediumMetricsAV:L/AC:L/Au:M/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the SCSI host release mechanism in the Linux kernel. When a SCSI device is freed, the SCSI host release is triggered, and it is essential to ensure that the low-level device driver module is not unloaded before the SCSI host instance is released. This is because the
shost->hostt is required in the release handler. The problem can lead to a kernel panic with the message 'BUG: unable to handle page fault for address'. The issue was reported by Changhui and Yi.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾