CVE-2021-47188

scsi: ufs: core: Improve SCSI abort handling

State: Published
Severity: 7.8 High
Published: Apr 10, 2024
Updated: Aug 5, 2026
Reserved: Mar 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Improve SCSI abort handling

The following has been observed on a test setup:

WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c Call trace: ufshcd_queuecommand+0x468/0x65c scsi_send_eh_cmnd+0x224/0x6a0 scsi_eh_test_devices+0x248/0x418 scsi_eh_ready_devs+0xc34/0xe58 scsi_error_handler+0x204/0x80c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30

That warning is triggered by the following statement:

WARN_ON(lrbp->cmd);

Fix this warning by clearing lrbp->cmd from the abort handler.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7a3e97b0dc4bbac2ba7803564ab0057722689921 to before 9491bc16082d9a402c9099acbfffc89af6f9316fAffected 7a3e97b0dc4bbac2ba7803564ab0057722689921 to before c36baca06efa833adaefba61f45fefdc49b6d070Affected 7a3e97b0dc4bbac2ba7803564ab0057722689921 to before 3ff1f6b6ba6f97f50862aa50e79959cc8ddc2566Affected
LinuxLinux	3.4Affected before 3.4Not affected 5.10.258 through 5.10.Not affected 5.15.5 through 5.15.Not affected 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.