CVE-2021-47622

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47622

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Fix a deadlock in the error handler The following deadlock has been observed on a test setup: - All tags allocated - The SCSI error handler calls ufshcd_eh_host_reset_handler() - ufshcd_eh_host_reset_handler() queues work that calls ufshcd_err_handler() - ufshcd_err_handler() locks up as follows: Workqueue: ufs_eh_wq_0 ufshcd_err_handler.cfi_jt Call trace: __switch_to+0x298/0x5d8 __schedule+0x6cc/0xa94 schedule+0x12c/0x298 blk_mq_get_tag+0x210/0x480 __blk_mq_alloc_request+0x1c8/0x284 blk_get_request+0x74/0x134 ufshcd_exec_dev_cmd+0x68/0x640 ufshcd_verify_dev_init+0x68/0x35c ufshcd_probe_hba+0x12c/0x1cb8 ufshcd_host_reset_and_restore+0x88/0x254 ufshcd_reset_and_restore+0xd0/0x354 ufshcd_err_handler+0x408/0xc58 process_one_work+0x24c/0x66c worker_thread+0x3e8/0xa4c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30 Fix this lockup by making ufshcd_exec_dev_cmd() allocate a reserved request.

References
Link Resource
https://git.kernel.org/stable/c/493c9e850677df8b4eda150c2364b1c1a72ed724 Mailing List Patch
https://git.kernel.org/stable/c/945c3cca05d78351bba29fa65d93834cb7934c7b Mailing List Patch
https://git.kernel.org/stable/c/d69d98d8edf90e25e4e09930dd36dd6d09dd6768 Mailing List Patch
https://git.kernel.org/stable/c/493c9e850677df8b4eda150c2364b1c1a72ed724 Mailing List Patch
https://git.kernel.org/stable/c/945c3cca05d78351bba29fa65d93834cb7934c7b Mailing List Patch
https://git.kernel.org/stable/c/d69d98d8edf90e25e4e09930dd36dd6d09dd6768 Mailing List Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/493c9e850677df8b4eda150c2364b1c1a72ed724 - Mailing List, Patch () https://git.kernel.org/stable/c/493c9e850677df8b4eda150c2364b1c1a72ed724 - Mailing List, Patch
References () https://git.kernel.org/stable/c/945c3cca05d78351bba29fa65d93834cb7934c7b - Mailing List, Patch () https://git.kernel.org/stable/c/945c3cca05d78351bba29fa65d93834cb7934c7b - Mailing List, Patch
References () https://git.kernel.org/stable/c/d69d98d8edf90e25e4e09930dd36dd6d09dd6768 - Mailing List, Patch () https://git.kernel.org/stable/c/d69d98d8edf90e25e4e09930dd36dd6d09dd6768 - Mailing List, Patch

21 Aug 2024, 17:31

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE CWE-667
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/493c9e850677df8b4eda150c2364b1c1a72ed724 - () https://git.kernel.org/stable/c/493c9e850677df8b4eda150c2364b1c1a72ed724 - Mailing List, Patch
References () https://git.kernel.org/stable/c/945c3cca05d78351bba29fa65d93834cb7934c7b - () https://git.kernel.org/stable/c/945c3cca05d78351bba29fa65d93834cb7934c7b - Mailing List, Patch
References () https://git.kernel.org/stable/c/d69d98d8edf90e25e4e09930dd36dd6d09dd6768 - () https://git.kernel.org/stable/c/d69d98d8edf90e25e4e09930dd36dd6d09dd6768 - Mailing List, Patch
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: scsi: ufs: corrige un punto muerto en el controlador de errores Se ha observado el siguiente punto muerto en una configuración de prueba: - Todas las etiquetas asignadas - El controlador de errores SCSI llama a ufshcd_eh_host_reset_handler() - ufshcd_eh_host_reset_handler( ) las colas funcionan que llaman a ufshcd_err_handler() - ufshcd_err_handler() se bloquea de la siguiente manera: Cola de trabajo: ufs_eh_wq_0 ufshcd_err_handler.cfi_jt Rastreo de llamadas: __switch_to+0x298/0x5d8 __schedule+0x6cc/0xa94 Schedule+0x12c/0x298 get_tag+0x210/0x480 __blk_mq_alloc_request+0x1c8/ 0x284 blk_get_request+0x74/0x134 ufshcd_exec_dev_cmd+0x68/0x640 ufshcd_verify_dev_init+0x68/0x35c ufshcd_probe_hba+0x12c/0x1cb8 ufshcd_host_reset_and_restore+0x88/0x254 _reset_and_restore+0xd0/0x354 ufshcd_err_handler+0x408/0xc58 proceso_one_work+0x24c/0x66c trabajador_thread+0x3e8/0xa4c kthread+0x150/ 0x1b4 ret_from_fork+0x10/0x30 Solucione este bloqueo haciendo que ufshcd_exec_dev_cmd() asigne una solicitud reservada.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

16 Jul 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-16 12:15

Updated : 2024-11-21 06:36

NVD link : CVE-2021-47622

Mitre link : CVE-2021-47622

CVE.ORG link : CVE-2021-47622

JSON object : View

Products Affected

linux

CWE
CWE-667

Improper Locking