CVE-2021-47480

scsi: core: Put LLD module refcnt after SCSI device is released

published May 22, 2024

CVSS
—
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Put LLD module refcnt after SCSI device is released

SCSI host release is triggered when SCSI device is freed. We have to make

sure that the low-level device driver module won't be unloaded before SCSI

host instance is released because shost->hostt is required in the release

handler.

Make sure to put LLD module refcnt after SCSI device is released.

Fixes a kernel panic of 'BUG: unable to handle page fault for address'

reported by Changhui and Yi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Published
2024-05-22T08:19Z
EPSS history
Timeline
  • 22 MAY 08:19Z
    scsi: core: Put LLD module refcnt after SCSI device is released
    cvelistv5