CVE-2021-27363: Infoleak

Published Feb 18, 2021
·
Updated

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system.

Other sources

A pointer leak was discovered in the linux kernel that can be used to determine the address of the iscsitransportstructure.

Red Hat

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsitransport/$TRANSPORTNAME/handle. When read, the showtransporthandle function (in drivers/scsi/scsitransportiscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsitransport struct in the kernel module's global variables.

Affected Software

17 affected componentsFixes available
redhat/kernel-rt<0:3.10.0-1160.24.1.rt56.1161.el7
0:3.10.0-1160.24.1.rt56.1161.el7
redhat/kernel<0:3.10.0-1160.24.1.el7
0:3.10.0-1160.24.1.el7
redhat/kernel<0:3.10.0-327.96.1.el7
0:3.10.0-327.96.1.el7
redhat/kernel<0:3.10.0-514.88.1.el7
0:3.10.0-514.88.1.el7
redhat/kernel<0:3.10.0-693.84.1.el7
0:3.10.0-693.84.1.el7
redhat/kernel<0:3.10.0-957.72.1.el7
0:3.10.0-957.72.1.el7
redhat/kernel<0:3.10.0-1062.49.1.el7
0:3.10.0-1062.49.1.el7
redhat/kernel-rt<0:4.18.0-240.22.1.rt7.77.el8_3
0:4.18.0-240.22.1.rt7.77.el8_3
redhat/kernel<0:4.18.0-240.22.1.el8_3
0:4.18.0-240.22.1.el8_3
redhat/kernel<0:4.18.0-147.44.1.el8_1
0:4.18.0-147.44.1.el8_1
redhat/kernel-rt<0:4.18.0-193.51.1.rt13.101.el8_2
0:4.18.0-193.51.1.rt13.101.el8_2
redhat/kernel<0:4.18.0-193.51.1.el8_2
0:4.18.0-193.51.1.el8_2
Linux Linux kernel<=5.11.3
Debian Debian Linux=9.0
NetApp Cloud Backup
NetApp Solidfire Baseboard Management Controller Firmware
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1

Remediation

Information

The LIBISCSI module will be auto-loaded when required, its use can be disabled by preventing the module from loading with the following instructions: # echo "install libiscsi /bin/true" >> /etc/modprobe.d/disable-libiscsi.conf The system will need to be restarted if the libiscsi modules are loaded. In most circumstances, the libiscsi kernel modules will be unable to be unloaded while any network interfaces are active and the protocol is in use. If the system requires iscsi to work correctly, this mitigation may not be suitable. If you need further assistance, see KCS article https://access.redhat.com/solutions/41278 or contact Red Hat Global Support Services.

Event History

Feb 18, 2021
Data Sourced
via Red Hat·10:33 AM
DescriptionSeverityAffected Software
Mar 5, 2021
CVE Published
12:00 AM
Mar 7, 2021
CVE Published
via MITRE·03:55 AM
Data Sourced
via MITRE·03:55 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:54 PM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·04:25 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·04:25 AM
DescriptionAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2021-27363?

CVE-2021-27363 is classified as a medium severity vulnerability.

2

How do I fix CVE-2021-27363?

To remediate CVE-2021-27363, users should upgrade to the patched kernel versions specified in the security advisories.

3

What impact does CVE-2021-27363 have on Linux kernel operations?

CVE-2021-27363 allows local users to leak kernel addresses or disrupt iSCSI connections, potentially affecting system stability.

4

Which Linux kernel versions are vulnerable to CVE-2021-27363?

CVE-2021-27363 affects various Linux kernel versions prior to the patched releases, including versions 3.10 and 4.18.

5

Who is affected by CVE-2021-27363?

Local users of systems running vulnerable versions of the Linux kernel are at risk from CVE-2021-27363.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203