{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2021-47328","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2024-05-21T14:28:16.975Z","datePublished":"2024-05-21T14:35:40.479Z","dateUpdated":"2025-12-18T11:36:48.521Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2025-12-18T11:36:48.521Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: iscsi: Fix conn use after free during resets\n\nIf we haven't done a unbind target call we can race where\niscsi_conn_teardown wakes up the EH thread and then frees the conn while\nthose threads are still accessing the conn ehwait.\n\nWe can only do one TMF per session so this just moves the TMF fields from\nthe conn to the session. We can then rely on the\niscsi_session_teardown->iscsi_remove_session->__iscsi_unbind_session call\nto remove the target and it's devices, and know after that point there is\nno device or scsi-ml callout trying to access the session."}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/scsi/libiscsi.c","include/scsi/libiscsi.h"],"versions":[{"version":"660d0831d1494a6837b2f810d08b5be092c1f31d","lessThan":"bf20d85a88384574fabb3d53ad62a8af57e7ab11","status":"affected","versionType":"git"},{"version":"660d0831d1494a6837b2f810d08b5be092c1f31d","lessThan":"d04958a348e560938410e04a12fb99da9c7e6a00","status":"affected","versionType":"git"},{"version":"660d0831d1494a6837b2f810d08b5be092c1f31d","lessThan":"89812e7957ab0746eab66ed6fc49d52bb4dca250","status":"affected","versionType":"git"},{"version":"660d0831d1494a6837b2f810d08b5be092c1f31d","lessThan":"f0a031f7c55ffd944fead1ddaf2aa94df9a158c1","status":"affected","versionType":"git"},{"version":"660d0831d1494a6837b2f810d08b5be092c1f31d","lessThan":"fa9542b35ceb4202e8f8d65f440529a63524dca9","status":"affected","versionType":"git"},{"version":"660d0831d1494a6837b2f810d08b5be092c1f31d","lessThan":"ec29d0ac29be366450a7faffbcf8cba3a6a3b506","status":"affected","versionType":"git"},{"version":"861a9633c22ee8b484e1b4054995f7e1b94a3834","status":"affected","versionType":"git"},{"version":"0adcec66bce9b7e84847da09ae3f8bc36e753312","status":"affected","versionType":"git"},{"version":"20b38ab5b687df3dbb873cfb0efa946a021f890a","status":"affected","versionType":"git"},{"version":"71b6a23ea944c6a30958bd15a69211e1fd521e1e","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/scsi/libiscsi.c","include/scsi/libiscsi.h"],"versions":[{"version":"4.2","status":"affected"},{"version":"0","lessThan":"4.2","status":"unaffected","versionType":"semver"},{"version":"4.19.198","lessThanOrEqual":"4.19.*","status":"unaffected","versionType":"semver"},{"version":"5.4.134","lessThanOrEqual":"5.4.*","status":"unaffected","versionType":"semver"},{"version":"5.10.52","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.12.19","lessThanOrEqual":"5.12.*","status":"unaffected","versionType":"semver"},{"version":"5.13.4","lessThanOrEqual":"5.13.*","status":"unaffected","versionType":"semver"},{"version":"5.14","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"4.19.198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"5.4.134"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"5.10.52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"5.12.19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"5.13.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"5.14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.18.22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.7"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/bf20d85a88384574fabb3d53ad62a8af57e7ab11"},{"url":"https://git.kernel.org/stable/c/d04958a348e560938410e04a12fb99da9c7e6a00"},{"url":"https://git.kernel.org/stable/c/89812e7957ab0746eab66ed6fc49d52bb4dca250"},{"url":"https://git.kernel.org/stable/c/f0a031f7c55ffd944fead1ddaf2aa94df9a158c1"},{"url":"https://git.kernel.org/stable/c/fa9542b35ceb4202e8f8d65f440529a63524dca9"},{"url":"https://git.kernel.org/stable/c/ec29d0ac29be366450a7faffbcf8cba3a6a3b506"}],"title":"scsi: iscsi: Fix conn use after free during resets","x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2021-47328","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-23T19:06:33.421642Z"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-07-05T17:22:48.620Z"}},{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-04T05:32:08.445Z"},"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/bf20d85a88384574fabb3d53ad62a8af57e7ab11","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/d04958a348e560938410e04a12fb99da9c7e6a00","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/89812e7957ab0746eab66ed6fc49d52bb4dca250","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/f0a031f7c55ffd944fead1ddaf2aa94df9a158c1","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/fa9542b35ceb4202e8f8d65f440529a63524dca9","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/ec29d0ac29be366450a7faffbcf8cba3a6a3b506","tags":["x_transferred"]}]}]}}