Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47328
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2021-47328

2024-05-2100:00:00
ubuntu.com
ubuntu.com
3
linux kernel
scsi
iscsi
vulnerability fix
session teardown
race condition

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

In the Linux kernel, the following vulnerability has been resolved: scsi:
iscsi: Fix conn use after free during resets If we haven’t done a unbind
target call we can race where iscsi_conn_teardown wakes up the EH thread
and then frees the conn while those threads are still accessing the conn
ehwait. We can only do one TMF per session so this just moves the TMF
fields from the conn to the session. We can then rely on the
iscsi_session_teardown->iscsi_remove_session->__iscsi_unbind_session call
to remove the target and it’s devices, and know after that point there is
no device or scsi-ml callout trying to access the session.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Related for UB:CVE-2021-47328