NetSight
IP …
medium5.5

CVE-2021-47480

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is trigge…

Impact

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered when SCSI device is freed. We have to make sure that the low-level device driver module won't be unloaded before SCSI host instance is released because shost->hostt is required in the release handler. Make sure to put LLD module refcnt after SCSI device is released. Fixes a kernel panic of 'BUG: unable to handle page fault for address' reported by Changhui and Yi.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.292
from 4.5 before 4.9.290
from 4.10 before 4.14.255
from 4.15 before 4.19.216
from 4.20 before 5.4.158
from 5.5 before 5.10.78

References