CVE-2021-47308 (GCVE-0-2021-47308)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:35 – Updated: 2026-08-05 08:47
VLAI
Title
scsi: libfc: Fix array index out of bound exception
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in fc_rport_prli_resp().
Severity
8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-21 18:45 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 386b97b43c0c9e0d878eec7ea1db16af22b036ae , < 44651522941c623e20882b3b443f23f77de1ea8b (git)
Affected: 386b97b43c0c9e0d878eec7ea1db16af22b036ae , < 4921b1618045ffab71b1050bf0014df3313a2289 (git)
Affected: 386b97b43c0c9e0d878eec7ea1db16af22b036ae , < 0fe70c15f9435bb3c50954778245d62ee38b0e03 (git)
Affected: 386b97b43c0c9e0d878eec7ea1db16af22b036ae , < a4a54c54af2516caa9c145015844543cfc84316a (git)
Affected: 386b97b43c0c9e0d878eec7ea1db16af22b036ae , < 8511293e643a18b248510ae5734e4f360754348c (git)
Affected: 386b97b43c0c9e0d878eec7ea1db16af22b036ae , < b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe (git)
Create a notification for this product.
Linux Linux Affected: 4.10
Unaffected: 0 , < 4.10 (semver)
Unaffected: 4.14.241 , ≤ 4.14.* (semver)
Unaffected: 4.19.199 , ≤ 4.19.* (semver)
Unaffected: 5.4.135 , ≤ 5.4.* (semver)
Unaffected: 5.10.53 , ≤ 5.10.* (semver)
Unaffected: 5.13.5 , ≤ 5.13.* (semver)
Unaffected: 5.14 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-47308",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-21T18:45:25.408358Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-08T21:15:58.371Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:08.437Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/44651522941c623e20882b3b443f23f77de1ea8b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4921b1618045ffab71b1050bf0014df3313a2289"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0fe70c15f9435bb3c50954778245d62ee38b0e03"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a4a54c54af2516caa9c145015844543cfc84316a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8511293e643a18b248510ae5734e4f360754348c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/libfc/fc_rport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "44651522941c623e20882b3b443f23f77de1ea8b",
              "status": "affected",
              "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
              "versionType": "git"
            },
            {
              "lessThan": "4921b1618045ffab71b1050bf0014df3313a2289",
              "status": "affected",
              "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
              "versionType": "git"
            },
            {
              "lessThan": "0fe70c15f9435bb3c50954778245d62ee38b0e03",
              "status": "affected",
              "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
              "versionType": "git"
            },
            {
              "lessThan": "a4a54c54af2516caa9c145015844543cfc84316a",
              "status": "affected",
              "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
              "versionType": "git"
            },
            {
              "lessThan": "8511293e643a18b248510ae5734e4f360754348c",
              "status": "affected",
              "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
              "versionType": "git"
            },
            {
              "lessThan": "b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe",
              "status": "affected",
              "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/libfc/fc_rport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "lessThan": "4.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.241",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.135",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.13.*",
              "status": "unaffected",
              "version": "5.13.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.241",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.199",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.135",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.53",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13.5",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libfc: Fix array index out of bound exception\n\nFix array index out of bound exception in fc_rport_prli_resp()."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The bug is reached when processing a Fibre Channel PRLI LS_ACC from a peer on the same FC SAN fabric or FCoE (ETH_P_FCOE) L2 segment; that is adjacent-network topology, not Internet-routable IP.\nAC:L - After the initiator automatically PLOGIs/PRLIs a discovered port, the peer fully controls the PRLI ACC and can set spp_type to any u8 \u003e= FC_FC4_PROV_SIZE, reliably indexing past fc_passive_prov[] with no race or nondeterministic condition.\nPR:N - fc_exch_recv and the FCoE/HBA receive path accept fabric-peer frames with no OS credential or capability check; fabric zoning only constrains topology, not authenticated privileges on this code path.\nUI:N - Discovery-driven fc_rport_login automatically advances through PLOGI into PRLI against a presented target; no separate victim action such as mounting a volume or confirming a prompt is required.\nS:U - The out-of-bounds provider-table access and resulting indirect call corrupt host kernel control flow within the same OS security authority and do not cross a VM, IOMMU, or sandbox boundary.\nC:H - Attacker-chosen spp_type performs an unbounded (up to index 255) out-of-bounds read of adjacent kernel pointer/data (including into fc_active_prov and further module globals), which per guidance is High confidentiality impact and enables further disclosure primitives if the call is hijacked.\nI:H - The OOB-read value is used as a struct fc4_prov * and prov-\u003eprli() is invoked, yielding an attacker-influenced indirect call that enables control-flow hijacking and arbitrary code execution.\nA:H - Dereferencing or calling through a non-NULL OOB pointer that is not a valid fc4_prov causes a kernel oops/panic, which is High availability impact and can be retried on subsequent PRLI exchanges."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:47:12.469Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/44651522941c623e20882b3b443f23f77de1ea8b"
        },
        {
          "url": "https://git.kernel.org/stable/c/4921b1618045ffab71b1050bf0014df3313a2289"
        },
        {
          "url": "https://git.kernel.org/stable/c/0fe70c15f9435bb3c50954778245d62ee38b0e03"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4a54c54af2516caa9c145015844543cfc84316a"
        },
        {
          "url": "https://git.kernel.org/stable/c/8511293e643a18b248510ae5734e4f360754348c"
        },
        {
          "url": "https://git.kernel.org/stable/c/b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe"
        }
      ],
      "title": "scsi: libfc: Fix array index out of bound exception",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47308",
    "datePublished": "2024-05-21T14:35:27.319Z",
    "dateReserved": "2024-05-21T13:27:52.133Z",
    "dateUpdated": "2026-08-05T08:47:12.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-47308",
      "date": "2026-10-02",
      "epss": "0.01187",
      "percentile": "0.66784"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/scsi/libfc/fc_rport.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "44651522941c623e20882b3b443f23f77de1ea8b",
                    "status": "affected",
                    "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4921b1618045ffab71b1050bf0014df3313a2289",
                    "status": "affected",
                    "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "0fe70c15f9435bb3c50954778245d62ee38b0e03",
                    "status": "affected",
                    "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a4a54c54af2516caa9c145015844543cfc84316a",
                    "status": "affected",
                    "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8511293e643a18b248510ae5734e4f360754348c",
                    "status": "affected",
                    "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe",
                    "status": "affected",
                    "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/scsi/libfc/fc_rport.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.10"
                  },
                  {
                    "lessThan": "4.10",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.14.*",
                    "status": "unaffected",
                    "version": "4.14.241",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.199",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.135",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.53",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.13.*",
                    "status": "unaffected",
                    "version": "5.13.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "5.14",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "82EDB655-50FA-495D-88AA-2D72CC23D904",
                    "versionEndExcluding": "4.14.241",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D1C5B0E1-06E7-4615-AA17-02585202D86E",
                    "versionEndExcluding": "4.19.199",
                    "versionStartIncluding": "4.15",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3EF7BA79-262D-4A55-A0A1-E0D0BCA7C320",
                    "versionEndExcluding": "5.4.135",
                    "versionStartIncluding": "4.20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "08E2D438-D50E-43C5-AF10-D62FE49B5815",
                    "versionEndExcluding": "5.10.53",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "808DF8D9-4913-4CC7-B91F-B4146556B7ED",
                    "versionEndExcluding": "5.13.5",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libfc: Fix array index out of bound exception\n\nFix array index out of bound exception in fc_rport_prli_resp()."
          },
          {
            "lang": "es",
            "value": " En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: libfc: Corregir excepci\u00f3n de \u00edndice de matriz fuera de los l\u00edmites. Corregir excepci\u00f3n de \u00edndice de matriz fuera de los l\u00edmites en fc_rport_prli_resp()."
          }
        ],
        "id": "CVE-2021-47308",
        "lastModified": "2026-08-04T10:16:57.417",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 2.5,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2021-47308",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-21T18:45:25.408358Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-05-21T15:15:18.383",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/0fe70c15f9435bb3c50954778245d62ee38b0e03"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/44651522941c623e20882b3b443f23f77de1ea8b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/4921b1618045ffab71b1050bf0014df3313a2289"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/8511293e643a18b248510ae5734e4f360754348c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/a4a54c54af2516caa9c145015844543cfc84316a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/0fe70c15f9435bb3c50954778245d62ee38b0e03"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/44651522941c623e20882b3b443f23f77de1ea8b"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/4921b1618045ffab71b1050bf0014df3313a2289"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/8511293e643a18b248510ae5734e4f360754348c"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/a4a54c54af2516caa9c145015844543cfc84316a"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-125"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-19T10:01:38+00:00",
      "cve": "CVE-2021-47308",
      "id": "CVE-2021-47308",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_affected": "166",
      "product_status:known_not_affected": "32",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: scsi: libfc: Fix array index out of bound exception",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47308.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-04T05:32:08.437Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://git.kernel.org/stable/c/44651522941c623e20882b3b443f23f77de1ea8b"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://git.kernel.org/stable/c/4921b1618045ffab71b1050bf0014df3313a2289"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://git.kernel.org/stable/c/0fe70c15f9435bb3c50954778245d62ee38b0e03"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://git.kernel.org/stable/c/a4a54c54af2516caa9c145015844543cfc84316a"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://git.kernel.org/stable/c/8511293e643a18b248510ae5734e4f360754348c"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://git.kernel.org/stable/c/b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 6.5,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2021-47308",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-05-21T18:45:25.408358Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-125",
                    "description": "CWE-125 Out-of-bounds Read",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-05-23T19:01:25.482Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Linux",
              "programFiles": [
                "drivers/scsi/libfc/fc_rport.c"
              ],
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "vendor": "Linux",
              "versions": [
                {
                  "lessThan": "44651522941c623e20882b3b443f23f77de1ea8b",
                  "status": "affected",
                  "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                  "versionType": "git"
                },
                {
                  "lessThan": "4921b1618045ffab71b1050bf0014df3313a2289",
                  "status": "affected",
                  "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                  "versionType": "git"
                },
                {
                  "lessThan": "0fe70c15f9435bb3c50954778245d62ee38b0e03",
                  "status": "affected",
                  "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                  "versionType": "git"
                },
                {
                  "lessThan": "a4a54c54af2516caa9c145015844543cfc84316a",
                  "status": "affected",
                  "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                  "versionType": "git"
                },
                {
                  "lessThan": "8511293e643a18b248510ae5734e4f360754348c",
                  "status": "affected",
                  "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                  "versionType": "git"
                },
                {
                  "lessThan": "b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe",
                  "status": "affected",
                  "version": "386b97b43c0c9e0d878eec7ea1db16af22b036ae",
                  "versionType": "git"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Linux",
              "programFiles": [
                "drivers/scsi/libfc/fc_rport.c"
              ],
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "vendor": "Linux",
              "versions": [
                {
                  "status": "affected",
                  "version": "4.10"
                },
                {
                  "lessThan": "4.10",
                  "status": "unaffected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "4.14.*",
                  "status": "unaffected",
                  "version": "4.14.241",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "4.19.*",
                  "status": "unaffected",
                  "version": "4.19.199",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.4.*",
                  "status": "unaffected",
                  "version": "5.4.135",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.10.*",
                  "status": "unaffected",
                  "version": "5.10.53",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.13.*",
                  "status": "unaffected",
                  "version": "5.13.5",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "*",
                  "status": "unaffected",
                  "version": "5.14",
                  "versionType": "original_commit_for_fix"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "4.14.241",
                      "versionStartIncluding": "4.10",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "4.19.199",
                      "versionStartIncluding": "4.10",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.4.135",
                      "versionStartIncluding": "4.10",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.10.53",
                      "versionStartIncluding": "4.10",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.13.5",
                      "versionStartIncluding": "4.10",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.14",
                      "versionStartIncluding": "4.10",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libfc: Fix array index out of bound exception\n\nFix array index out of bound exception in fc_rport_prli_resp()."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "scenarios": [
                {
                  "lang": "en",
                  "value": "AV:A - The bug is reached when processing a Fibre Channel PRLI LS_ACC from a peer on the same FC SAN fabric or FCoE (ETH_P_FCOE) L2 segment; that is adjacent-network topology, not Internet-routable IP.\nAC:L - After the initiator automatically PLOGIs/PRLIs a discovered port, the peer fully controls the PRLI ACC and can set spp_type to any u8 \u003e= FC_FC4_PROV_SIZE, reliably indexing past fc_passive_prov[] with no race or nondeterministic condition.\nPR:N - fc_exch_recv and the FCoE/HBA receive path accept fabric-peer frames with no OS credential or capability check; fabric zoning only constrains topology, not authenticated privileges on this code path.\nUI:N - Discovery-driven fc_rport_login automatically advances through PLOGI into PRLI against a presented target; no separate victim action such as mounting a volume or confirming a prompt is required.\nS:U - The out-of-bounds provider-table access and resulting indirect call corrupt host kernel control flow within the same OS security authority and do not cross a VM, IOMMU, or sandbox boundary.\nC:H - Attacker-chosen spp_type performs an unbounded (up to index 255) out-of-bounds read of adjacent kernel pointer/data (including into fc_active_prov and further module globals), which per guidance is High confidentiality impact and enables further disclosure primitives if the call is hijacked.\nI:H - The OOB-read value is used as a struct fc4_prov * and prov-\u003eprli() is invoked, yielding an attacker-influenced indirect call that enables control-flow hijacking and arbitrary code execution.\nA:H - Dereferencing or calling through a non-NULL OOB pointer that is not a valid fc4_prov causes a kernel oops/panic, which is High availability impact and can be retried on subsequent PRLI exchanges."
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-05T08:47:12.469Z",
            "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "shortName": "Linux"
          },
          "references": [
            {
              "url": "https://git.kernel.org/stable/c/44651522941c623e20882b3b443f23f77de1ea8b"
            },
            {
              "url": "https://git.kernel.org/stable/c/4921b1618045ffab71b1050bf0014df3313a2289"
            },
            {
              "url": "https://git.kernel.org/stable/c/0fe70c15f9435bb3c50954778245d62ee38b0e03"
            },
            {
              "url": "https://git.kernel.org/stable/c/a4a54c54af2516caa9c145015844543cfc84316a"
            },
            {
              "url": "https://git.kernel.org/stable/c/8511293e643a18b248510ae5734e4f360754348c"
            },
            {
              "url": "https://git.kernel.org/stable/c/b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe"
            }
          ],
          "title": "scsi: libfc: Fix array index out of bound exception",
          "x_generator": {
            "engine": "bippy-1.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "assignerShortName": "Linux",
        "cveId": "CVE-2021-47308",
        "datePublished": "2024-05-21T14:35:27.319Z",
        "dateReserved": "2024-05-21T13:27:52.133Z",
        "dateUpdated": "2026-08-05T08:47:12.469Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.