CVE-2021-47178
Description
This linux kernel vulnerability occurs in the SCSI target core subsystem, specifically concerning how CPU IDs are handled for TCMU (Target Core Module in Userspace) devices. The issue arises because the kernel previously used the smp_processor_id() function within preemptible code during abort handling in the SCSI host work queue. This unsafe operation triggers a kernel BUG message and potential system instability when thread migrations occur, particularly noticeable when the DEBUG_PREEMPT configuration is enabled. Patched kernel versions resolve the vulnerability by replacing this check with raw_smp_processor_id(), allowing the system to safely retrieve the CPU ID for performance optimizations without violating preemptible code constraints.
Statement
This vulnerability is rated as having a Low impact because exploiting it requires privileged access to configure SCSI target infrastructure, and the issue primarily surfaces as diagnostic warnings under debug configurations rather than causing system failure in standard production environments. Production Red Hat Enterprise Linux kernels ship with preemption debugging disabled, meaning thread preemption during processor identification only affects non-critical performance affinity hints rather than data integrity or kernel stability. Additionally, the SCSI target core framework and userspace target devices are not enabled or active in default configurations.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.4 | 5.5 | 7.5 |
| Attack Vector | Local | Local | Network |
| Attack Complexity | Low | Low | Low |
| Privileges Required | High | Low | None |
| User Interaction | None | None | None |
| Scope | Unchanged | Unchanged | Unchanged |
| Confidentiality | None | None | None |
| Integrity Impact | None | None | None |
| Availability Impact | High | High | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Application Data; Modify Application Data; Read Files or Directories; Modify Files or Directories
An attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
