CVE-2021-47188

A flaw was found in the Linux kernel's Universal Flash Storage (UFS) driver subsystem. During SCSI command abort processing, the driver fails to clear the aborted command reference from the request block. A local user could exploit this issue during error recovery operations, triggering a kernel warning condition that can crash the system and cause a Denial of Service (DoS).

This vulnerability is rated as having a Low severity impact for Red Hat because exploitation requires access to specialized Universal Flash Storage hardware rarely used in enterprise server environments and is triggered only during specific SCSI command abort error-handling sequences. Furthermore, default Red Hat Enterprise Linux configurations do not panic on kernel warnings, confining the flaw's effect to a logged warning message rather than an immediate kernel panic or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.