CVE-2021-47565: scsi: mpt3sas: Fix kernel panic during drive powercycle test
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Fix kernel panic during drive powercycle test
While looping over shost's sdev list it is possible that one of the drives is getting removed and its sastarget object is freed but its sdev object remains intact.
Consequently, a kernel panic can occur while the driver is trying to access the sasaddress field of sastarget object without also checking the sastarget object for NULL.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47565?
CVE-2021-47565 is considered to have a medium severity level, primarily due to its potential to cause kernel panic in specific conditions.
How do I fix CVE-2021-47565?
To fix CVE-2021-47565, update the Linux kernel to a version that includes the patch for this vulnerability.
Which Linux kernel versions are affected by CVE-2021-47565?
CVE-2021-47565 affects several versions of the Linux kernel ranging from 3.8 to 5.16-rc2.
Is CVE-2021-47565 a remote exploit?
CVE-2021-47565 is not classified as a remote exploit; it requires local access to trigger the kernel panic.
What component is impacted by CVE-2021-47565?
CVE-2021-47565 impacts the SCSI subsystem in the Linux kernel, specifically related to the mpt3sas driver.