CVE-2021-47198
HIGHLinux kernel 5.14-5.15.4 - Use-After-Free in lpfc_unreg_rpi
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine An error is detected with the following report when unloading the driver: "KASAN: use-after-free in lpfc_unreg_rpi+0x1b1b" The NLP_REG_LOGIN_SEND nlp_flag is set in lpfc_reg_fab_ctrl_node(), but the flag is not cleared upon completion of the login. This allows a second call to lpfc_unreg_rpi() to proceed with nlp_rpi set to LPFC_RPI_ALLOW_ERROR. This results in a use after free access when used as an rpi_ids array index. Fix by clearing the NLP_REG_LOGIN_SEND nlp_flag in lpfc_mbx_cmpl_fc_reg_login().
References (2)
Core 2
Scores
CVSS v3
7.8
EPSS
0.0022
EPSS Percentile
12.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-416
Status
published
Products (7)
Linux/Linux
< 5.14
Linux/Linux
5.14
Linux/Linux
5.15.5 - 5.15.*
Linux/Linux
5.16
Linux/Linux
fe83e3b9b422ac8ece2359c7b7290efe7f0335a2 - 79b20beccea3a3938a8500acef4e6b9d7c66142f
Linux/Linux
fe83e3b9b422ac8ece2359c7b7290efe7f0335a2 - dbebf865b3239595c1d4dba063b122862583b52a
linux/linux_kernel
5.14 - 5.15.5
Published
Apr 10, 2024
Tracked Since
Feb 18, 2026