Review reviewHigh

CVE-2021-47308

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in fc_rport_prli_resp().

CVSS: 8.8
EPSS: 1.18%
CISA KEV: Not listed
Published: 2024.05.22

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability1.18%

Technical severityCVSS 8.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in fc_rport_prli_resp().

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 386b97b43c0c9e0d878eec7ea1db16af22b036ae < 44651522941c623e20882b3b443f23f77de1ea8b, >= 386b97b43c0c9e0d878eec7ea1db16af22b036ae < 4921b1618045ffab71b1050bf0014df3313a2289, >= 386b97b43c0c9e0d878eec7ea1db16af22b036ae < 0fe70c15f9435bb3c50954778245d62ee38b0e03, >= 386b97b43c0c9e0d878eec7ea1db16af22b036ae < a4a54c54af2516caa9c145015844543cfc84316a, >= 386b97b43c0c9e0d878eec7ea1db16af22b036ae < 8511293e643a18b248510ae5734e4f360754348c, >= 386b97b43c0c9e0d878eec7ea1db16af22b036ae < b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe, >= 4.10, < 4.14.241, >= 4.15 < 4.19.199, >= 4.20 < 5.4.135, >= 5.5 < 5.10.53, >= 5.11 < 5.13.5
Fixed versions: 4.14.241, 4.19.199, 5.4.135, 5.10.53, 5.13.5

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-125