CVE-2021-47188 scsi: ufs: core: Improve SCSI abort handling
A null pointer dereference in the Linux kernel UFS driver can cause a system crash during SCSI abort handling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-47188?
CVE-2021-47188 is a high-severity vulnerability in Linux kernel, published on 10 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Improve SCSI abort handling
The following has been observed on a test setup:
WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c Call trace: ufshcd_queuecommand+0x468/0x65c scsi_send_eh_cmnd+0x224/0x6a0 scsi_eh_test_devices+0x248/0x418 scsi_eh_ready_devs+0xc34/0xe58 scsi_error_handler+0x204/0x80c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30
That warning is triggered by the following statement:
WARN_ON(lrbp->cmd);
Fix this warning by clearing lrbp->cmd from the abort handler.
Which versions are affected by CVE-2021-47188?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2021-47188?
Apply the vendor's patch.
Is CVE-2021-47188 being exploited?
There is no known exploitation of CVE-2021-47188 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2021-47188, GHSA-c87m-qf5q-jcgf, ROOT-OS-DEBIAN-11-CVE-2021-47188, UBUNTU-CVE-2021-47188.