CVE-2021-47565

scsi: mpt3sas: Fix kernel panic during drive powercycle test

State: Published
Severity: Not scored
Published: May 24, 2024
Updated: May 11, 2026
Reserved: May 24, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Fix kernel panic during drive powercycle test

While looping over shost's sdev list it is possible that one of the drives is getting removed and its sas_target object is freed but its sdev object remains intact.

Consequently, a kernel panic can occur while the driver is trying to access the sas_address field of sas_target object without also checking the sas_target object for NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f92363d12359498f9a9960511de1a550f0ec41c2 to before 5d4d50b1f159a5ebab7617f47121b4370aa58afeAffected f92363d12359498f9a9960511de1a550f0ec41c2 to before 58ef2c7a6de13721865d84b80eecf56d6cba0937Affected f92363d12359498f9a9960511de1a550f0ec41c2 to before dd035ca0e7a142870a970d46b1d19276cfe2bc8cAffected f92363d12359498f9a9960511de1a550f0ec41c2 to before 0d4b29eaadc1f59cec0c7e85eae77d08fcca9824Affected f92363d12359498f9a9960511de1a550f0ec41c2 to before 7e324f734a914957b8cc3ff4b4c9f0409558adb5Affected f92363d12359498f9a9960511de1a550f0ec41c2 to before 2bf9c5a5039c8f4b037236aed505e6a25c1d5f7bAffected f92363d12359498f9a9960511de1a550f0ec41c2 to before 8485649a7655e791a6e4e9f15b4d30fdae937184Affected f92363d12359498f9a9960511de1a550f0ec41c2 to before 0ee4ba13e09c9d9c1cb6abb59da8295d9952328bAffected
LinuxLinux	3.8Affected before 3.8Not affected 4.4.294 through 4.4.Not affected 4.9.292 through 4.9.Not affected 4.14.257 through 4.14.Not affected 4.19.219 through 4.19.Not affected 5.4.163 through 5.4.Not affected 5.10.83 through 5.10.Not affected 5.15.6 through 5.15.*Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

f92363d12359498f9a9960511de1a550f0ec41c2 to before 5d4d50b1f159a5ebab7617f47121b4370aa58afeAffected
f92363d12359498f9a9960511de1a550f0ec41c2 to before 58ef2c7a6de13721865d84b80eecf56d6cba0937Affected
f92363d12359498f9a9960511de1a550f0ec41c2 to before dd035ca0e7a142870a970d46b1d19276cfe2bc8cAffected
f92363d12359498f9a9960511de1a550f0ec41c2 to before 0d4b29eaadc1f59cec0c7e85eae77d08fcca9824Affected
f92363d12359498f9a9960511de1a550f0ec41c2 to before 7e324f734a914957b8cc3ff4b4c9f0409558adb5Affected
f92363d12359498f9a9960511de1a550f0ec41c2 to before 2bf9c5a5039c8f4b037236aed505e6a25c1d5f7bAffected
f92363d12359498f9a9960511de1a550f0ec41c2 to before 8485649a7655e791a6e4e9f15b4d30fdae937184Affected
f92363d12359498f9a9960511de1a550f0ec41c2 to before 0ee4ba13e09c9d9c1cb6abb59da8295d9952328bAffected

LinuxLinux

3.8Affected
before 3.8Not affected
4.4.294 through 4.4.*Not affected
4.9.292 through 4.9.*Not affected
4.14.257 through 4.14.*Not affected
4.19.219 through 4.19.*Not affected
5.4.163 through 5.4.*Not affected
5.10.83 through 5.10.*Not affected
5.15.6 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.