CVE-2021-47176
published 2024-03-25CVE-2021-47176: In the Linux kernel, the following vulnerability has been resolved: s390/dasd: add missing discipline function Fix crash with illegal operation exception in…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: add missing discipline function
Fix crash with illegal operation exception in dasd_device_tasklet.
Commit b72949328869 ("s390/dasd: Prepare for additional path event handling")
renamed the verify_path function for ECKD but not for FBA and DIAG.
This leads to a panic when the path verification function is called for a
FBA or DIAG device.
Fix by defining a wrapper function for dasd_generic_verify_path().
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 5.10.173 < 5.10.175 | 5.10.175 |
| linux | linux | >= 5.4.235 < 5.4.237 | 5.4.237 |
| linux | linux | >= 72aebdac390bf0dc04c0385d2db7ee522f4ffa3c < aa8579bc084673c651204f7cd0d6308a47dffc16 | aa8579bc084673c651204f7cd0d6308a47dffc16 |
| linux | linux | >= 8bc5a76268fb334236296b4c185b8337e0d85473 < 6a16810068e70959bc1df686424aa35ce05578f1 | 6a16810068e70959bc1df686424aa35ce05578f1 |
| linux | linux | >= b72949328869dfd45f6452c2410647afd7db5f1a < a16be88a3d7e5efcb59a15edea87a8bd369630c6 | a16be88a3d7e5efcb59a15edea87a8bd369630c6 |
| linux | linux | >= b72949328869dfd45f6452c2410647afd7db5f1a < c0c8a8397fa8a74d04915f4d3d28cb4a5d401427 | c0c8a8397fa8a74d04915f4d3d28cb4a5d401427 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 5.10.173 < 5.10.175 | 5.10.175 |
| linux | linux_kernel | >= 5.11 < 5.12.9 | 5.12.9 |
| linux | linux_kernel | >= 5.4.235 < 5.4.237 | 5.4.237 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: s390/dasd: add missing discipline function
vendor_redhat·2024-03-25·CVSS 5.5
CVE-2021-47176 [MEDIUM] CWE-99 kernel: s390/dasd: add missing discipline function
kernel: s390/dasd: add missing discipline function
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: add missing discipline function
Fix crash with illegal operation exception in dasd_device_tasklet.
Commit b72949328869 ("s390/dasd: Prepare for additional path event handling")
renamed the verify_path function for ECKD but not for FBA and DIAG.
This leads to a panic when the path verification function is called for a
FBA or DIAG device.
Fix by defining a wrapper function for dasd_generic_verify_path().
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Affected
Package: kernel-rt
Debian
CVE-2021-47176: linux - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: ...
vendor_debian·2021·CVSS 5.5
CVE-2021-47176 [MEDIUM] CVE-2021-47176: linux - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: ...
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: add missing discipline function Fix crash with illegal operation exception in dasd_device_tasklet. Commit b72949328869 ("s390/dasd: Prepare for additional path event handling") renamed the verify_path function for ECKD but not for FBA and DIAG. This leads to a panic when the path verification function is called for a FBA or DIAG device. Fix by defining a wrapper function for dasd_generic_verify_path().
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
GHSA
GHSA-8gg9-98mh-rcwr: In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: add missing discipline function
Fix crash with illegal operation exce
ghsa_unreviewed·2024-03-25
CVE-2021-47176 [MEDIUM] GHSA-8gg9-98mh-rcwr: In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: add missing discipline function
Fix crash with illegal operation exce
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: add missing discipline function
Fix crash with illegal operation exception in dasd_device_tasklet.
Commit b72949328869 ("s390/dasd: Prepare for additional path event handling")
renamed the verify_path function for ECKD but not for FBA and DIAG.
This leads to a panic when the path verification function is called for a
FBA or DIAG device.
Fix by defining a wrapper function for dasd_generic_verify_path().
OSV
CVE-2021-47176: In the Linux kernel, the following vulnerability has been resolved: s390/dasd: add missing discipline function Fix crash with illegal operation except
osv·2024-03-25·CVSS 5.5
CVE-2021-47176 [MEDIUM] CVE-2021-47176: In the Linux kernel, the following vulnerability has been resolved: s390/dasd: add missing discipline function Fix crash with illegal operation except
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: add missing discipline function Fix crash with illegal operation exception in dasd_device_tasklet. Commit b72949328869 ("s390/dasd: Prepare for additional path event handling") renamed the verify_path function for ECKD but not for FBA and DIAG. This leads to a panic when the path verification function is called for a FBA or DIAG device. Fix by defining a wrapper function for dasd_generic_verify_path().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/6a16810068e70959bc1df686424aa35ce05578f1https://git.kernel.org/stable/c/a16be88a3d7e5efcb59a15edea87a8bd369630c6https://git.kernel.org/stable/c/aa8579bc084673c651204f7cd0d6308a47dffc16https://git.kernel.org/stable/c/c0c8a8397fa8a74d04915f4d3d28cb4a5d401427https://git.kernel.org/stable/c/6a16810068e70959bc1df686424aa35ce05578f1https://git.kernel.org/stable/c/a16be88a3d7e5efcb59a15edea87a8bd369630c6https://git.kernel.org/stable/c/aa8579bc084673c651204f7cd0d6308a47dffc16https://git.kernel.org/stable/c/c0c8a8397fa8a74d04915f4d3d28cb4a5d401427
2024-03-25
Published