CVE-2021-47308

scsi: libfc: Fix array index out of bound exception

State: Published
Severity: 8.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: libfc: Fix array index out of bound exception

Fix array index out of bound exception in fc_rport_prli_resp().

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 44651522941c623e20882b3b443f23f77de1ea8bAffected 386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 4921b1618045ffab71b1050bf0014df3313a2289Affected 386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 0fe70c15f9435bb3c50954778245d62ee38b0e03Affected 386b97b43c0c9e0d878eec7ea1db16af22b036ae to before a4a54c54af2516caa9c145015844543cfc84316aAffected 386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 8511293e643a18b248510ae5734e4f360754348cAffected 386b97b43c0c9e0d878eec7ea1db16af22b036ae to before b27c4577557045f1ab3cdfeabfc7f3cd24aca1feAffected
LinuxLinux	4.10Affected before 4.10Not affected 4.14.241 through 4.14.Not affected 4.19.199 through 4.19.Not affected 5.4.135 through 5.4.Not affected 5.10.53 through 5.10.Not affected 5.13.5 through 5.13.*Not affected 5.14 and laterNot affected

Product

Versions

LinuxLinux

386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 44651522941c623e20882b3b443f23f77de1ea8bAffected
386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 4921b1618045ffab71b1050bf0014df3313a2289Affected
386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 0fe70c15f9435bb3c50954778245d62ee38b0e03Affected
386b97b43c0c9e0d878eec7ea1db16af22b036ae to before a4a54c54af2516caa9c145015844543cfc84316aAffected
386b97b43c0c9e0d878eec7ea1db16af22b036ae to before 8511293e643a18b248510ae5734e4f360754348cAffected
386b97b43c0c9e0d878eec7ea1db16af22b036ae to before b27c4577557045f1ab3cdfeabfc7f3cd24aca1feAffected

LinuxLinux

4.10Affected
before 4.10Not affected
4.14.241 through 4.14.*Not affected
4.19.199 through 4.19.*Not affected
5.4.135 through 5.4.*Not affected
5.10.53 through 5.10.*Not affected
5.13.5 through 5.13.*Not affected
5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.