CVE-2021-47503
scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() Calling scsi_remove_host() before scsi_add_host() results in a crash: BUG: kernel NULL pointer dereference, address: 0000000000000108 RIP: 0010:device_del+0x63/0x440 Call Trace: device_unregister+0x17/0x60 scsi_remove_host+0xee/0x2a0 pm8001_pci_probe+0x6ef/0x1b90 [pm80xx] local_pci_probe+0x3f/0x90 We cannot call scsi_remove_host() in pm8001_alloc() because scsi_add_host() has not been called yet at that point in time. Function call tree: pm8001_pci_probe() | `- pm8001_pci_alloc() | | | `- pm8001_alloc() | | | `- scsi_remove_host() | `- scsi_add_host()
Timeline
ID reserved
By Linux
- 2 days later
· 2 days later
Published
- 24 months later
· 24 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Analyzed | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.25% · top 84% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.2.
Weakness
Affected products
- affected 05c6c029a44d9f43715577e33e95eba87f44d285 – < 1e434d2687e8bc0b3cdc9dd093c0e9047c0b4add
- affected 05c6c029a44d9f43715577e33e95eba87f44d285 – < f8dccc1bdea7e21b5ec06c957aef8831c772661c
- affected 05c6c029a44d9f43715577e33e95eba87f44d285 – < 653926205741add87a6cf452e21950eebc6ac10b
- affected 5.10
- unaffected < 5.10
- unaffected 5.10.85 – ≤ 5.10.*
- unaffected 5.15.8 – ≤ 5.15.*
- unaffected 5.16 – ≤ *
References (3)
- https://git.kernel.org/stable/c/1e434d2687e8bc0b3cdc9dd093c0e9047c0b4add (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/f8dccc1bdea7e21b5ec06c957aef8831c772661c (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/653926205741add87a6cf452e21950eebc6ac10b (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2021-47503)Record last updated .