CVE-2021-47308CWE-125

CVE-2021-47308

High · published May 21, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: libfc: Fix array index out of bound exception

Fix array index out of bound exception in fc_rport_prli_resp().

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01187 · 67.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-05-21T19:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel< 4.14.2414.14.241
linux/linux_kernel≥ 4.15, < 4.19.1994.19.199
linux/linux_kernel≥ 4.20, < 5.4.1355.4.135
linux/linux_kernel≥ 5.5, < 5.10.535.10.53
linux/linux_kernel≥ 5.11, < 5.13.55.13.5
References (12)
EPSS history
Timeline
  • 21 MAY 14:35Z
    scsi: libfc: Fix array index out of bound exception
    cvelistv5