CVE-2023-53464
EUVD-2025-3279101.10.2025, 12:15
In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
The validity of sock should be checked before assignment to avoid incorrect
values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref
while calling getpeername()") introduced this change which may lead to
inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.
Fix the issue by moving the position of the assignment.EnginsightAffected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 5.10.150 ≤ 𝑥 < 5.10.178 |
| linux | linux_kernel | 5.15.75 ≤ 𝑥 < 5.15.107 |
| linux | linux_kernel | 5.19.17 ≤ 𝑥 < 6.0 |
| linux | linux_kernel | 6.0.3 ≤ 𝑥 < 6.1.24 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.2.11 |
| linux | linux_kernel | 6.3:rc1 |
| linux | linux_kernel | 6.3:rc2 |
| linux | linux_kernel | 6.3:rc3 |
| linux | linux_kernel | 6.3:rc4 |
| linux | linux_kernel | 6.3:rc5 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration
References