NetSight
high7.8

CVE-2021-47565

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's sde…

Impact

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's sdev list it is possible that one of the drives is getting removed and its sas_target object is freed but its sdev object remains intact. Consequently, a kernel panic can occur while the driver is trying to access the sas_address field of sas_target object without also checking the sas_target object for NULL.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.8 before 4.4.294
from 4.5 before 4.9.292
from 4.10 before 4.14.257
from 4.15 before 4.19.219
from 4.20 before 5.4.163
from 5.5 before 5.10.83

Weakness classification

References