01 Record

CVE-2021-47337

scsi: core: Fix bad pointer dereference when ehandler kthread is invalid

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

scsi: core: Fix bad pointer dereference when ehandler kthread is invalid

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 15.2% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-21 14:35Z2 YR AGO

Last updated

2026-05-23 15:19Z3 MO AGO

Reserved

2024-05-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

4a7a511a50f471d8a789956291b69e836440787f94b3e3428f3c8913752edc35

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux8958181c1663e24a13434448e7d6b96b5d04900a to < d2f0b960d07e52bb664471b4de0ed8b08c636b3a, db08ce595dd64ea9859f7d088b51cbfc8e685c66 to < f3d0a109240c9bed5c60d819014786be3a2fe515, 2dc85045ae65b9302a1d2e2ddd7ce4c030153a6a to < e1bd3fac2baa3d5c04375980c1d5263a3335af92, 79296e292d67fa7b5fb8d8c27343683e823872c8 to < 887bfae2732b5b02a86a859fd239d34f7ff93c05, 7a696ce1d5d16a33a6cd6400bbcc0339b2460e11 to < ea518b70ed5e4598c8d706f37fc16f7b06e440bd, 45d83db4728127944b237c0c8248987df9d478e7 to < 8e4212ecf0713dd57d0e3209a66201da582149b1, 66a834d092930cf41d809c0e989b13cd6f9ca006 to < c1671d2d2ef8a84837eea1b4d99ca0c6a66fb691, 66a834d092930cf41d809c0e989b13cd6f9ca006 to < 93aa71ad7379900e61c8adff6a710a4c18c7c99b, 4.9.273 to < 4.9.276, 4.14.237 to < 4.14.240, 4.19.195 to < 4.19.198, 5.4.126 to < 5.4.134, 5.10.44 to < 5.10.52, 5.12.11 to < 5.12.19, 5.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d2f0b960d07e52bb664471b4de0ed8b08c636b3a
git.kernel.orghttps://git.kernel.org/stable/c/f3d0a109240c9bed5c60d819014786be3a2fe515
git.kernel.orghttps://git.kernel.org/stable/c/e1bd3fac2baa3d5c04375980c1d5263a3335af92
git.kernel.orghttps://git.kernel.org/stable/c/887bfae2732b5b02a86a859fd239d34f7ff93c05
git.kernel.orghttps://git.kernel.org/stable/c/ea518b70ed5e4598c8d706f37fc16f7b06e440bd
git.kernel.orghttps://git.kernel.org/stable/c/8e4212ecf0713dd57d0e3209a66201da582149b1
git.kernel.orghttps://git.kernel.org/stable/c/c1671d2d2ef8a84837eea1b4d99ca0c6a66fb691
git.kernel.orghttps://git.kernel.org/stable/c/93aa71ad7379900e61c8adff6a710a4c18c7c99b

01 Record index

CVE-2021-47337

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2021-47337

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References