CVE-2021-47308
kernel: scsi: libfc: Fix array index out of bound exception
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 21, 2024
Updated · August 19, 2026
Description
A flaw was found in the Linux kernel's libfc component, specifically within the fc_rport_prli_resp() function. This vulnerability is caused by an array index out of bounds exception. Exploiting this flaw could lead to memory corruption, potentially resulting in a denial of service or the disclosure of sensitive information.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
CWE-125 · Out-of-bounds Read