CVE-2021-47045

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47045
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() It is possible to call lpfc_issue_els_plogi() passing a did for which no matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a null pointer to a lpfc_nodelist structure resulting in a null pointer dereference. Fix by returning an error status if no valid ndlp is found. Fix up comments regarding ndlp reference counting.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 Patch
https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 Patch
https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 Patch
https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 Patch
https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 Patch
https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Dec 2024, 18:41

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 - () https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 - Patch
References () https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 - () https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 - Patch
References () https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 - () https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 - Patch
CWE CWE-476

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 - () https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 -
References () https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 - () https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 -
References () https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 - () https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: lpfc: corrige la desreferencia del puntero nulo en lpfc_prep_els_iocb() Es posible llamar a lpfc_issue_els_plogi() pasando un did para el cual no se encuentra ningún ndlp coincidente. Luego se realiza una llamada a lpfc_prep_els_iocb() con un puntero nulo a una estructura lpfc_nodelist, lo que da como resultado una desreferencia del puntero nulo. Corrija devolviendo un estado de error si no se encuentra ningún ndlp válido. Corrija los comentarios sobre el recuento de referencias de ndlp.

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2024-12-06 18:41

NVD link : CVE-2021-47045

Mitre link : CVE-2021-47045

CVE.ORG link : CVE-2021-47045

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference