CVE-2021-47328

A vulnerability was found in the Linux kernel's iSCSI subsystem, where the iscsi_conn_teardown() function could use a freed connection during resets. This occurs if the connection is freed while still being accessed by error handler threads, potentially causing system instability or crashes.

This vulnerability is rated as a moderate severity because the issue poses a risk of system crashes or instability rather than direct data loss or unauthorized access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.