CVE-2021-47188

Advisory lineage Upstream: 0 Downstream: 20
Modified
Published: 10 Apr 2024, 18:56
Last modified:01 Jun 2026, 16:10

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

10 Apr 2024, 18:56
Published
Vulnerability first disclosed
01 Jun 2026, 16:10
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The following has been observed on a test setup: WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c Call trace: ufshcd_queuecommand+0x468/0x65c scsi_send_eh_cmnd+0x224/0x6a0 scsi_eh_test_devices+0x248/0x418 scsi_eh_ready_devs+0xc34/0xe58 scsi_error_handler+0x204/0x80c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30 That warning is triggered by the following statement: WARN_ON(lrbp->cmd); Fix this warning by clearing lrbp->cmd from the abort handler.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 3%

Affected Systems

  • linux•linux

    ≥ 7a3e97b0dc4bbac2ba7803564ab0057722689921, < 9491bc16082d9a402c9099acbfffc89af6f9316f | ≥ 7a3e97b0dc4bbac2ba7803564ab0057722689921, < c36baca06efa833adaefba61f45fefdc49b6d070 | ≥ 7a3e97b0dc4bbac2ba7803564ab0057722689921, < 3ff1f6b6ba6f97f50862aa50e79959cc8ddc2566 | 3.4

  • linux•linux_kernel

    ≥ 3.4, < 5.15.5 | 5.16:rc1

References (3)