In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's sdev list it is possible that one of the drives is getting removed and its sas_target object is freed but its sdev object remains intact. Consequently, a kernel panic can occur while the driver is trying to access the sas_address field of sas_target object without also checking the sas_target object for NULL.
History

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-24T15:12:52.786Z

Updated: 2024-12-19T07:44:56.437Z

Reserved: 2024-05-24T15:11:00.728Z

Link: CVE-2021-47565

cve-icon Vulnrichment

Updated: 2024-08-04T05:39:59.770Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-24T15:15:21.443

Modified: 2024-11-21T06:36:34.150

Link: CVE-2021-47565

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-24T00:00:00Z

Links: CVE-2021-47565 - Bugzilla