CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects Linux.
CVE
CVE-2023-52974
Severity
HIGH
CVSS
7.8
EPSS
0.28%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.
Related CVEs
Other vulnerabilities affecting the same vendor(s)