CVE - CVE-2023-52974

CVE-ID
CVE-2023-52974	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0aaabdb900c7415caa2006ef580322f7eac5f6b6 URL:https://git.kernel.org/stable/c/0aaabdb900c7415caa2006ef580322f7eac5f6b6 MISC:https://git.kernel.org/stable/c/496af9d3682ed4c28fb734342a09e6cc0c056ea4 URL:https://git.kernel.org/stable/c/496af9d3682ed4c28fb734342a09e6cc0c056ea4 MISC:https://git.kernel.org/stable/c/61e43ebfd243bcbad11be26bd921723027b77441 URL:https://git.kernel.org/stable/c/61e43ebfd243bcbad11be26bd921723027b77441 MISC:https://git.kernel.org/stable/c/6abd4698f4c8a78e7bbfc421205c060c199554a0 URL:https://git.kernel.org/stable/c/6abd4698f4c8a78e7bbfc421205c060c199554a0 MISC:https://git.kernel.org/stable/c/9758ffe1c07b86aefd7ca8e40d9a461293427ca0 URL:https://git.kernel.org/stable/c/9758ffe1c07b86aefd7ca8e40d9a461293427ca0 MISC:https://git.kernel.org/stable/c/d4d765f4761f9e3a2d62992f825aeee593bcb6b9 URL:https://git.kernel.org/stable/c/d4d765f4761f9e3a2d62992f825aeee593bcb6b9 MISC:https://git.kernel.org/stable/c/f484a794e4ee2a9ce61f52a78e810ac45f3fe3b3 URL:https://git.kernel.org/stable/c/f484a794e4ee2a9ce61f52a78e810ac45f3fe3b3
Assigning CNA
kernel.org
Date Record Created
20250327	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250327)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)