In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

When parsing the txq list in lpfc_drain_txq(), the driver attempts to pass
the requests to the adapter. If such an attempt fails, a local "fail_msg"
string is set and a log message output. The job is then added to a
completions list for cancellation.

Processing of any further jobs from the txq list continues, but since
"fail_msg" remains set, jobs are added to the completions list regardless
of whether a wqe was passed to the adapter. If successfully added to
txcmplq, jobs are added to both lists resulting in list corruption.

Fix by clearing the fail_msg string after adding a job to the completions
list. This stops the subsequent jobs from being added to the completions
list unless they had an appropriate failure.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00009.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < ad4776b5eb2e58af1226847fcd3b4f6d051674dd
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < ec70d80a8642900086447ba0cdc79e3f44d42e8f
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < f05a0191b90156e539cccc189b9d87ca2a4d9305
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < b291d147d0268e93ad866f8bc820ea14497abc9b
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < 16bcbfb56d759c25665f786e33ec633b9508a08f
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < c097bd5a59162156d9c2077a2f58732ffbaa9fca
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < 814d3610c4ce86e8cf285b2cdac0057a42e82de5
2a9bf3d011303d8da64cd5e0e7fdd95f0c143984 affected < 99154581b05c8fb22607afb7c3d66c1bace6aa5d
Linux Linux affected
Version Status Constraints
2.6.36 affected —
0 unaffected < 2.6.36
4.4.293 unaffected ≤ 4.4.*
4.9.291 unaffected ≤ 4.9.*
4.14.256 unaffected ≤ 4.14.*
4.19.218 unaffected ≤ 4.19.*
5.4.162 unaffected ≤ 5.4.*
5.10.82 unaffected ≤ 5.10.*
5.15.5 unaffected ≤ 5.15.*
5.16 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-0:4.18.0-372.9.1.el8 cpe:/o:redhat:enterprise_linux:8 RHSA-2022:1988 2022-05-10T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/16bcbfb56d759c25665f786e33ec633b9508a08f cve-icon cve-icon
https://git.kernel.org/stable/c/814d3610c4ce86e8cf285b2cdac0057a42e82de5 cve-icon cve-icon
https://git.kernel.org/stable/c/99154581b05c8fb22607afb7c3d66c1bace6aa5d cve-icon cve-icon
https://git.kernel.org/stable/c/ad4776b5eb2e58af1226847fcd3b4f6d051674dd cve-icon cve-icon
https://git.kernel.org/stable/c/b291d147d0268e93ad866f8bc820ea14497abc9b cve-icon cve-icon
https://git.kernel.org/stable/c/c097bd5a59162156d9c2077a2f58732ffbaa9fca cve-icon cve-icon
https://git.kernel.org/stable/c/ec70d80a8642900086447ba0cdc79e3f44d42e8f cve-icon cve-icon
https://git.kernel.org/stable/c/f05a0191b90156e539cccc189b9d87ca2a4d9305 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024041037-CVE-2021-47203-ff72@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47203 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47203 cve-icon
History

Thu, 27 Mar 2025 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-787
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Mon, 02 Dec 2024 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/o:redhat:enterprise_linux:8
Vendors & Products Redhat
Redhat enterprise Linux

Mon, 04 Nov 2024 12:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-18T11:36:03.996Z

Reserved: 2024-03-25T09:12:14.117Z

Link: CVE-2021-47203

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:07.414Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-10T19:15:48.217

Modified: 2025-03-27T21:15:41.670

Link: CVE-2021-47203

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-04-10T00:00:00Z

Links: CVE-2021-47203 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses