Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2021-47045

HistoryFeb 28, 2024 - 9:15 a.m.

CVE-2021-47045

2024-02-2809:15:40

Debian Security Bug Tracker

security-tracker.debian.org

vulnerability

resolved

scsi

lpfc

linux kernel

null pointer dereference

ndlp

structure

error status

comments

reference counting

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() It is possible to call lpfc_issue_els_plogi() passing a did for which no matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a null pointer to a lpfc_nodelist structure resulting in a null pointer dereference. Fix by returning an error status if no valid ndlp is found. Fix up comments regarding ndlp reference counting.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.76-1linux_6.1.76-1_all.deb
Debian11alllinux< 5.10.209-2linux_5.10.209-2_all.deb
Debian10alllinux< 4.19.249-2linux_4.19.249-2_all.deb
Debian999alllinux< 6.9.7-1linux_6.9.7-1_all.deb
Debian13alllinux< 6.8.12-1linux_6.8.12-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.76-1	linux_6.1.76-1_all.deb
Debian	11	all	linux	< 5.10.209-2	linux_5.10.209-2_all.deb
Debian	10	all	linux	< 4.19.249-2	linux_4.19.249-2_all.deb
Debian	999	all	linux	< 6.9.7-1	linux_6.9.7-1_all.deb
Debian	13	all	linux	< 6.8.12-1	linux_6.8.12-1_all.deb