CVE-2023-53464

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s SCSI subsystem, specifically within the iscsi tcp component. The issue stems from a missing validation check for the sock variable before it is assigned within the iscsi set param() function. A previous commit intended to address a separate null-pointer dereference introduced the potential for inconsistent values in tcp sw conn->sendpage and conn->datadgst en. The correction involves repositioning the assignment to ensure the sock variable is valid before being used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.