CVE-2021-47198

HIGH

Linux kernel 5.14-5.15.4 - Use-After-Free in lpfc_unreg_rpi

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine An error is detected with the following report when unloading the driver: "KASAN: use-after-free in lpfc_unreg_rpi+0x1b1b" The NLP_REG_LOGIN_SEND nlp_flag is set in lpfc_reg_fab_ctrl_node(), but the flag is not cleared upon completion of the login. This allows a second call to lpfc_unreg_rpi() to proceed with nlp_rpi set to LPFC_RPI_ALLOW_ERROR. This results in a use after free access when used as an rpi_ids array index. Fix by clearing the NLP_REG_LOGIN_SEND nlp_flag in lpfc_mbx_cmpl_fc_reg_login().

Scores

CVSS v3 7.8
EPSS 0.0022
EPSS Percentile 12.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (7)
Linux/Linux < 5.14
Linux/Linux 5.14
Linux/Linux 5.15.5 - 5.15.*
Linux/Linux 5.16
Linux/Linux fe83e3b9b422ac8ece2359c7b7290efe7f0335a2 - 79b20beccea3a3938a8500acef4e6b9d7c66142f
Linux/Linux fe83e3b9b422ac8ece2359c7b7290efe7f0335a2 - dbebf865b3239595c1d4dba063b122862583b52a
linux/linux_kernel 5.14 - 5.15.5
Published Apr 10, 2024
Tracked Since Feb 18, 2026