Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53464

scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en. Fix the issue by moving the position of the assignment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 884a788f065578bb640382279a83d1df433b13e6 to < 499757ad3332e2527254f9ab68dec1da087b1d96affected
  • a26b0658751bb0a3b28386fca715333b104d32a2 to < 5e5c5f472972c4bc9430adc08b36763a0fa5b9f7affected
  • 57569c37f0add1b6489e1a1563c71519daf732cf to < 6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91affected
  • 57569c37f0add1b6489e1a1563c71519daf732cf to < b287e21e73ec23f3788fbe40037c42dbe6e9a9a9affected
  • 57569c37f0add1b6489e1a1563c71519daf732cf to < 48b19b79cfa37b1e50da3b5a8af529f994c08901affected
  • 897dbbc57d71e8a34ec1af8e573a142de457da38affected
  • 0a0b861fce2657ba08ec356a74346b37ca4b2008affected
  • 5.10.150 to < 5.10.178affected
  • 5.15.75 to < 5.15.107affected
  • 5.19.17 to < 5.20affected
  • 6.0.3 to < 6.1affected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 5.10.178 to ≤ 5.10.*unaffected
  • 5.15.107 to ≤ 5.15.*unaffected
  • 6.1.24 to ≤ 6.1.*unaffected
  • 6.2.11 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References