CVE-2023-53643

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s nvme-tcp subsystem. Specifically, a NULL pointer dereference can occur when running the 'nvme list' command during error recovery. This happens because the getsockname() function is called with a socket that has already been released and a new socket created in its place. The issue arises during error recovery work, where the nvme tcp socket is released and a new one created, making it unsafe to access the original socket without a proper check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.