PT-2021-8252 · Linux · Linux Kernel

David Disseldorp · Published 2021-07-21 · Updated 2024-12-23 · CVE-2021-47290

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a NULL pointer dereference in the Linux kernel's scsi: target: core component. This occurs when the target complete cmd() function attempts to access the se tpg wwn pointer, which is NULL in the case of LIO's EXTENDED COPY worker. The vulnerability can be triggered by initiating an EXTENDED COPY operation, leading to a kernel NULL pointer dereference. Technical details include the target complete cmd() function and the se tpg wwn pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-00790

CVE-2021-47290

Affected Products

Linux Kernel

References · 15

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47290 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47290 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47290 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47290 · Vendor Advisory
• https://git.kernel.org/stable/c/e7732c5a19a15a62b0b23fd683a639b0483e1f40 · Patch
• https://osv.dev/vulnerability/CVE-2021-47290 · Vendor Advisory
• https://git.kernel.org/stable/c/a47fa41381a09e5997afd762664db4f5f6657e03 · Patch
• https://bdu.fstec.ru/vul/2025-00790 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-47290 · Security Note
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2021-47290 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a47fa41381a09e5997afd762664db4f5f6657e03 · Note
• https://git.kernel.org/linus/a47fa41381a09e5997afd762664db4f5f6657e03 · Note
• https://t.me/cvenotify/105302 · Telegram Post
• https://lore.kernel.org/linux-cve-announce/2024052122-CVE-2021-47290-b403@gregkh · Note