CVE-2021-47045
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() It is possible to call lpfc_issue_els_plogi() passing a did for which no matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a null pointer to a lpfc_nodelist structure resulting in a null pointer dereference. Fix by returning an error status if no valid ndlp is found. Fix up comments regarding ndlp reference counting.
SeverityMedium
CVSS5.5
Exploit probability15. percentile0.2%
Product
Linux Kernel
PublishedFeb 28, 2024
First seenFeb 28, 2024
How to fix
Update
- linux linux_kernel5.11.21, 5.12.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.11 ≤ v < 5.11.21, 5.12 ≤ v < 5.12.4 | 5.11.21, 5.12.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.