CVE-2021-47480 (GCVE-0-2021-47480)

Vulnerability from cvelistv5 – Published: 2024-05-22 08:19 – Updated: 2026-05-11 13:55
VLAI?
Title
scsi: core: Put LLD module refcnt after SCSI device is released
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered when SCSI device is freed. We have to make sure that the low-level device driver module won't be unloaded before SCSI host instance is released because shost->hostt is required in the release handler. Make sure to put LLD module refcnt after SCSI device is released. Fixes a kernel panic of 'BUG: unable to handle page fault for address' reported by Changhui and Yi.
Severity ?
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < 1105573d964f7b78734348466b01f5f6ba8a1813 (git)
Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < 8e4814a461787e15a31d322d9efbe0d4f6822428 (git)
Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < 61a0faa89f21861d1f8d059123b5c285a5d9ffee (git)
Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < c2df161f69fb1c67f63adbd193368b47f511edc0 (git)
Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < 1ce287eff9f23181d5644db787f472463a61f68b (git)
Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < 7b57c38d12aed1b5d92f74748bed25e0d041729f (git)
Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < f30822c0b4c35ec86187ab055263943dc71a6836 (git)
Affected: 65110b2168950a19cc78b5027ed18cb811fbdae8 , < f2b85040acec9a928b4eb1b57a989324e8e38d3f (git)
Create a notification for this product.
Linux Linux Affected: 2.6.16
Unaffected: 0 , < 2.6.16 (semver)
Unaffected: 4.4.292 , ≤ 4.4.* (semver)
Unaffected: 4.9.290 , ≤ 4.9.* (semver)
Unaffected: 4.14.255 , ≤ 4.14.* (semver)
Unaffected: 4.19.216 , ≤ 4.19.* (semver)
Unaffected: 5.4.158 , ≤ 5.4.* (semver)
Unaffected: 5.10.78 , ≤ 5.10.* (semver)
Unaffected: 5.14.17 , ≤ 5.14.* (semver)
Unaffected: 5.15 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.500Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47480",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:36:02.036772Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:32:53.299Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/scsi.c",
            "drivers/scsi/scsi_sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1105573d964f7b78734348466b01f5f6ba8a1813",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            },
            {
              "lessThan": "8e4814a461787e15a31d322d9efbe0d4f6822428",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            },
            {
              "lessThan": "61a0faa89f21861d1f8d059123b5c285a5d9ffee",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            },
            {
              "lessThan": "c2df161f69fb1c67f63adbd193368b47f511edc0",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            },
            {
              "lessThan": "1ce287eff9f23181d5644db787f472463a61f68b",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            },
            {
              "lessThan": "7b57c38d12aed1b5d92f74748bed25e0d041729f",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            },
            {
              "lessThan": "f30822c0b4c35ec86187ab055263943dc71a6836",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            },
            {
              "lessThan": "f2b85040acec9a928b4eb1b57a989324e8e38d3f",
              "status": "affected",
              "version": "65110b2168950a19cc78b5027ed18cb811fbdae8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/scsi.c",
            "drivers/scsi/scsi_sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.16"
            },
            {
              "lessThan": "2.6.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.292",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.290",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.255",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.158",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.14.*",
              "status": "unaffected",
              "version": "5.14.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.292",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.290",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.255",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.216",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.158",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.78",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14.17",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Put LLD module refcnt after SCSI device is released\n\nSCSI host release is triggered when SCSI device is freed. We have to make\nsure that the low-level device driver module won\u0027t be unloaded before SCSI\nhost instance is released because shost-\u003ehostt is required in the release\nhandler.\n\nMake sure to put LLD module refcnt after SCSI device is released.\n\nFixes a kernel panic of \u0027BUG: unable to handle page fault for address\u0027\nreported by Changhui and Yi."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:55:30.128Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428"
        },
        {
          "url": "https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee"
        },
        {
          "url": "https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0"
        },
        {
          "url": "https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b"
        },
        {
          "url": "https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836"
        },
        {
          "url": "https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f"
        }
      ],
      "title": "scsi: core: Put LLD module refcnt after SCSI device is released",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47480",
    "datePublished": "2024-05-22T08:19:32.839Z",
    "dateReserved": "2024-05-22T06:20:56.200Z",
    "dateUpdated": "2026-05-11T13:55:30.128Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-47480",
      "date": "2026-05-20",
      "epss": "0.00025",
      "percentile": "0.07094"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: core: Put LLD module refcnt after SCSI device is released\\n\\nSCSI host release is triggered when SCSI device is freed. We have to make\\nsure that the low-level device driver module won\u0027t be unloaded before SCSI\\nhost instance is released because shost-\u003ehostt is required in the release\\nhandler.\\n\\nMake sure to put LLD module refcnt after SCSI device is released.\\n\\nFixes a kernel panic of \u0027BUG: unable to handle page fault for address\u0027\\nreported by Changhui and Yi.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: core: colocar el m\\u00f3dulo LLD refcnt despu\\u00e9s de liberar el dispositivo SCSI. La liberaci\\u00f3n del host SCSI se activa cuando se libera el dispositivo SCSI. Tenemos que asegurarnos de que el m\\u00f3dulo del controlador de dispositivo de bajo nivel no se descargue antes de que se lance la instancia del host SCSI porque se requiere shost-\u0026gt;hostt en el controlador de lanzamiento. Aseg\\u00farese de poner el m\\u00f3dulo LLD refcnt despu\\u00e9s de lanzar el dispositivo SCSI. Corrige un problema de p\\u00e1nico del kernel de \u0027ERROR: no se puede manejar el error de p\\u00e1gina para la direcci\\u00f3n\u0027 informado por Changhui y Yi.\"}]",
      "id": "CVE-2021-47480",
      "lastModified": "2024-11-21T06:36:16.500",
      "published": "2024-05-22T09:15:09.907",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47480\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-22T09:15:09.907\",\"lastModified\":\"2025-09-29T16:43:08.450\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: core: Put LLD module refcnt after SCSI device is released\\n\\nSCSI host release is triggered when SCSI device is freed. We have to make\\nsure that the low-level device driver module won\u0027t be unloaded before SCSI\\nhost instance is released because shost-\u003ehostt is required in the release\\nhandler.\\n\\nMake sure to put LLD module refcnt after SCSI device is released.\\n\\nFixes a kernel panic of \u0027BUG: unable to handle page fault for address\u0027\\nreported by Changhui and Yi.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: core: colocar el m\u00f3dulo LLD refcnt despu\u00e9s de liberar el dispositivo SCSI. La liberaci\u00f3n del host SCSI se activa cuando se libera el dispositivo SCSI. Tenemos que asegurarnos de que el m\u00f3dulo del controlador de dispositivo de bajo nivel no se descargue antes de que se lance la instancia del host SCSI porque se requiere shost-\u0026gt;hostt en el controlador de lanzamiento. Aseg\u00farese de poner el m\u00f3dulo LLD refcnt despu\u00e9s de lanzar el dispositivo SCSI. Corrige un problema de p\u00e1nico del kernel de \u0027ERROR: no se puede manejar el error de p\u00e1gina para la direcci\u00f3n\u0027 informado por Changhui y Yi.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.4.292\",\"matchCriteriaId\":\"E44D7B05-DE06-4714-AB39-F8242F1E49F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.5\",\"versionEndExcluding\":\"4.9.290\",\"matchCriteriaId\":\"85D8337A-4EA1-4787-85EA-4BF4328A9436\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.14.255\",\"matchCriteriaId\":\"436BD498-0DB1-4290-9A36-A52CB11B3AC3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.216\",\"matchCriteriaId\":\"0F384B60-1DBA-4E2B-9110-0087D95F30DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.158\",\"matchCriteriaId\":\"90BDA665-668F-4013-AB98-81ADFF4DAD38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.78\",\"matchCriteriaId\":\"D3B5073C-E848-4302-BB1E-80EAE2E56FFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.14.17\",\"matchCriteriaId\":\"AECD183A-92E2-4400-AD1C-744EE7A466DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E46C74C6-B76B-4C94-A6A4-FD2FFF62D644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"60134C3A-06E4-48C1-B04F-2903732A4E56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0460DA88-8FE1-46A2-9DDA-1F1ABA552E71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF55383D-4DF2-45DC-93F7-571F4F978EAB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBD45831-4B79-42BC-ABC0-86870F0DEA89\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:39:59.500Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47480\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:36:02.036772Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:13.258Z\"}}], \"cna\": {\"title\": \"scsi: core: Put LLD module refcnt after SCSI device is released\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"1105573d964f7b78734348466b01f5f6ba8a1813\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"8e4814a461787e15a31d322d9efbe0d4f6822428\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"61a0faa89f21861d1f8d059123b5c285a5d9ffee\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"c2df161f69fb1c67f63adbd193368b47f511edc0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"1ce287eff9f23181d5644db787f472463a61f68b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"7b57c38d12aed1b5d92f74748bed25e0d041729f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"f30822c0b4c35ec86187ab055263943dc71a6836\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65110b2168950a19cc78b5027ed18cb811fbdae8\", \"lessThan\": \"f2b85040acec9a928b4eb1b57a989324e8e38d3f\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/scsi/scsi.c\", \"drivers/scsi/scsi_sysfs.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.16\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.16\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.4.292\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.4.*\"}, {\"status\": \"unaffected\", \"version\": \"4.9.290\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.255\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.216\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.158\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.78\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.14.17\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.14.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/scsi/scsi.c\", \"drivers/scsi/scsi_sysfs.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/1105573d964f7b78734348466b01f5f6ba8a1813\"}, {\"url\": \"https://git.kernel.org/stable/c/8e4814a461787e15a31d322d9efbe0d4f6822428\"}, {\"url\": \"https://git.kernel.org/stable/c/61a0faa89f21861d1f8d059123b5c285a5d9ffee\"}, {\"url\": \"https://git.kernel.org/stable/c/c2df161f69fb1c67f63adbd193368b47f511edc0\"}, {\"url\": \"https://git.kernel.org/stable/c/1ce287eff9f23181d5644db787f472463a61f68b\"}, {\"url\": \"https://git.kernel.org/stable/c/7b57c38d12aed1b5d92f74748bed25e0d041729f\"}, {\"url\": \"https://git.kernel.org/stable/c/f30822c0b4c35ec86187ab055263943dc71a6836\"}, {\"url\": \"https://git.kernel.org/stable/c/f2b85040acec9a928b4eb1b57a989324e8e38d3f\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: core: Put LLD module refcnt after SCSI device is released\\n\\nSCSI host release is triggered when SCSI device is freed. We have to make\\nsure that the low-level device driver module won\u0027t be unloaded before SCSI\\nhost instance is released because shost-\u003ehostt is required in the release\\nhandler.\\n\\nMake sure to put LLD module refcnt after SCSI device is released.\\n\\nFixes a kernel panic of \u0027BUG: unable to handle page fault for address\u0027\\nreported by Changhui and Yi.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.4.292\", \"versionStartIncluding\": \"2.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.290\", \"versionStartIncluding\": \"2.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.255\", \"versionStartIncluding\": \"2.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.216\", \"versionStartIncluding\": \"2.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.158\", \"versionStartIncluding\": \"2.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.78\", \"versionStartIncluding\": \"2.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.14.17\", \"versionStartIncluding\": \"2.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15\", \"versionStartIncluding\": \"2.6.16\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T13:55:30.128Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47480\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T13:55:30.128Z\", \"dateReserved\": \"2024-05-22T06:20:56.200Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-22T08:19:32.839Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.