CVE-2023-52974

March 28, 2025, 6:11 p.m.

7.8
High

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.

Product(s) Impacted

Vendor Product Versions
Linux
  • Kernel
  • *

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-416
Use After Free
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
a linux kernel / / / / / / / /

References

https://git.kernel.org/stable/c/0aaabdb900c7415caa2006ef580322f7eac5f6b6
https://git.kernel.org/stable/c/496af9d3682ed4c28fb734342a09e6cc0c056ea4
https://git.kernel.org/stable/c/61e43ebfd243bcbad11be26bd921723027b77441
https://git.kernel.org/stable/c/6abd4698f4c8a78e7bbfc421205c060c199554a0
https://git.kernel.org/stable/c/9758ffe1c07b86aefd7ca8e40d9a461293427ca0
https://git.kernel.org/stable/c/d4d765f4761f9e3a2d62992f825aeee593bcb6b9
https://git.kernel.org/stable/c/f484a794e4ee2a9ce61f52a78e810ac45f3fe3b3

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
CWE-416
2025-03-27
CVE-2023-52974

CVSS Score

7.8 / 10

CVSS Data - 3.1

  • Attack Vector: LOCAL
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: HIGH
  • Availability Impact: HIGH

    • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

    View Vector String

Timeline

Published: March 27, 2025, 5:15 p.m.
Last Modified: March 28, 2025, 6:11 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.