CVE-2021-47480

scsi: core: Put LLD module refcnt after SCSI device is released

MEDIUM

5.5

CVSS Score

Published: May 22, 2024 at 08:19 AM UTC

Updated: June 17, 2026 at 04:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered when SCSI device is freed. We have to make sure that the low-level device driver module won't be unloaded before SCSI host instance is released because shost->hostt is required in the release handler. Make sure to put LLD module refcnt after SCSI device is released. Fixes a kernel panic of 'BUG: unable to handle page fault for address' reported by Changhui and Yi.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.4.2922.6.16 ≤ v < 4.14.2552.6.16 ≤ v < 4.19.2162.6.16 ≤ v < 4.4.2922.6.16 ≤ v < 4.9.2902.6.16 ≤ v < 5.10.782.6.16 ≤ v < 5.14.172.6.16 ≤ v < 5.152.6.16 ≤ v < 5.4.1584.10 ≤ v < 4.14.2554.15 ≤ v < 4.19.2164.20 ≤ v < 5.4.1584.5 ≤ v < 4.9.2905.11 ≤ v < 5.14.175.5 ≤ v < 5.10.782.6.16 5.15 rc1 5.15 rc2 5.15 rc3 5.15 rc4 5.15 rc5 5.15 rc665110b2168950a19cc78b5027ed18cb811fbdae8

Vendor states this is fixed in 1105573d964f7b78734348466b01f5f6ba8a1813 (fixed)

Vendor states this is fixed in 1ce287eff9f23181d5644db787f472463a61f68b (fixed)

Vendor states this is fixed in 61a0faa89f21861d1f8d059123b5c285a5d9ffee (fixed)

Vendor states this is fixed in 7b57c38d12aed1b5d92f74748bed25e0d041729f (fixed)

Vendor states this is fixed in 8e4814a461787e15a31d322d9efbe0d4f6822428 (fixed)

Vendor states this is fixed in c2df161f69fb1c67f63adbd193368b47f511edc0 (fixed)

Vendor states this is fixed in f2b85040acec9a928b4eb1b57a989324e8e38d3f (fixed)

Vendor states this is fixed in f30822c0b4c35ec86187ab055263943dc71a6836 (fixed)

Vendor states this is fixed in 2.6.16 (unaffected)

Vendor states this is fixed in 4.14.255 (unaffected)

Vendor states this is fixed in 4.19.216 (unaffected)

Vendor states this is fixed in 4.4.292 (unaffected)