CVE-2021-47328: scsi: iscsi: Fix conn use after free during resets
Vulnerability summary
CVE-2021-47328 is a critical (CVSS 9.8) Use After Free vulnerability in linux. EPSS estimates a 0.77% chance of exploitation in the next 30 days, higher than 55.5% of scored vulnerabilities.
Severe, CVSS 9.8 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 21-05-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix conn use after free during resets If we haven't done a unbind target call we can race where iscsi_conn_teardown wakes up the EH thread and then frees the conn while those threads are still accessing the conn ehwait. We can only do one TMF per session so this just moves the TMF fields from the conn to the session. We can then rely on the iscsi_session_teardown->iscsi_remove_session->__iscsi_unbind_session call to remove the target and it's devices, and know after that point there is no device or scsi-ml callout trying to access the session.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.77%
Chance of exploitation in the next 30 days
Percentile
56%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.77% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu88 products
- linuxAll versions (No fix recorded) | < 5.4.0-88.99
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1057.60
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 660d0831d1494a6837b2f810d08b5be092c1f31d, < bf20d85a88384574fabb3d53ad62a8af57e7ab11 | ≥ 660d0831d1494a6837b2f810d08b5be092c1f31d, < d04958a348e560938410e04a12fb99da9c7e6a00 | ≥ 660d0831d1494a6837b2f810d08b5be092c1f31d, < 89812e7957ab0746eab66ed6fc49d52bb4dca250 | ≥ 660d0831d1494a6837b2f810d08b5be092c1f31d, < f0a031f7c55ffd944fead1ddaf2aa94df9a158c1 | ≥ 660d0831d1494a6837b2f810d08b5be092c1f31d, < fa9542b35ceb4202e8f8d65f440529a63524dca9 | ≥ 660d0831d1494a6837b2f810d08b5be092c1f31d, < ec29d0ac29be366450a7faffbcf8cba3a6a3b506 | 861a9633c22ee8b484e1b4054995f7e1b94a3834 | 0adcec66bce9b7e84847da09ae3f8bc36e753312 | 20b38ab5b687df3dbb873cfb0efa946a021f890a | 71b6a23ea944c6a30958bd15a69211e1fd521e1e | ≥ 3.2.72, < 3.3 | ≥ 3.4.111, < 3.5 | ≥ 3.18.22, < 3.19 | ≥ 4.1.7, < 4.2 | 4.2
- linux_kernel< 4.19.198 | ≥ 4.20, < 5.4.134 | ≥ 5.5, < 5.10.52 | ≥ 5.11, < 5.12.19 | ≥ 5.13, < 5.13.4
Debian1 product
- linux< 5.14.6-1
3 vendors · 91 products
