Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52974

scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a79af8a64d395bd89de8695a5ea5e1a7f01f02a8 to < 496af9d3682ed4c28fb734342a09e6cc0c056ea4affected
  • a79af8a64d395bd89de8695a5ea5e1a7f01f02a8 to < 6abd4698f4c8a78e7bbfc421205c060c199554a0affected
  • a79af8a64d395bd89de8695a5ea5e1a7f01f02a8 to < d4d765f4761f9e3a2d62992f825aeee593bcb6b9affected
  • a79af8a64d395bd89de8695a5ea5e1a7f01f02a8 to < 9758ffe1c07b86aefd7ca8e40d9a461293427ca0affected
  • a79af8a64d395bd89de8695a5ea5e1a7f01f02a8 to < 0aaabdb900c7415caa2006ef580322f7eac5f6b6affected
  • a79af8a64d395bd89de8695a5ea5e1a7f01f02a8 to < 61e43ebfd243bcbad11be26bd921723027b77441affected
  • a79af8a64d395bd89de8695a5ea5e1a7f01f02a8 to < f484a794e4ee2a9ce61f52a78e810ac45f3fe3b3affected

Linux Linux

Default version status: affected

  • 2.6.39affected
  • 0 to < 2.6.39unaffected
  • 4.14.306 to ≤ 4.14.*unaffected
  • 4.19.273 to ≤ 4.19.*unaffected
  • 5.4.232 to ≤ 5.4.*unaffected
  • 5.10.168 to ≤ 5.10.*unaffected
  • 5.15.93 to ≤ 5.15.*unaffected
  • 6.1.11 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References