CVE-2023-53464
published 2025-10-01CVE-2023-53464: In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
The validity of sock should be checked before assignment to avoid incorrect
values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref
while calling getpeername()") introduced this change which may lead to
inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.
Fix the issue by moving the position of the assignment.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 5.10.150 < 5.10.178 | 5.10.178 |
| linux | linux | >= 5.15.75 < 5.15.107 | 5.15.107 |
| linux | linux | >= 5.19.17 < 5.20 | 5.20 |
| linux | linux | >= 57569c37f0add1b6489e1a1563c71519daf732cf < 6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91 | 6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91 |
| linux | linux | >= 57569c37f0add1b6489e1a1563c71519daf732cf < b287e21e73ec23f3788fbe40037c42dbe6e9a9a9 | b287e21e73ec23f3788fbe40037c42dbe6e9a9a9 |
| linux | linux | >= 57569c37f0add1b6489e1a1563c71519daf732cf < 48b19b79cfa37b1e50da3b5a8af529f994c08901 | 48b19b79cfa37b1e50da3b5a8af529f994c08901 |
| linux | linux | >= 6.0.3 < 6.1 | 6.1 |
| linux | linux | >= 884a788f065578bb640382279a83d1df433b13e6 < 499757ad3332e2527254f9ab68dec1da087b1d96 | 499757ad3332e2527254f9ab68dec1da087b1d96 |
| linux | linux | >= a26b0658751bb0a3b28386fca715333b104d32a2 < 5e5c5f472972c4bc9430adc08b36763a0fa5b9f7 | 5e5c5f472972c4bc9430adc08b36763a0fa5b9f7 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 5.10.150 < 5.10.178 | 5.10.178 |
| linux | linux_kernel | >= 5.15.75 < 5.15.107 | 5.15.107 |
| linux | linux_kernel | >= 5.19.17 < 6.0 | 6.0 |
| linux | linux_kernel | >= 6.0.3 < 6.1.24 | 6.1.24 |
| linux | linux_kernel | >= 6.2 < 6.2.11 | 6.2.11 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.10.177/5.15.106/6.1.23/6.2.10 iscsi_tcp iscsi_set_param null pointer dereference (Nessus ID 319448 / WID-SEC-2025-2187)
vuldb·2026-06-08·CVSS 5.5
CVE-2023-53464 [MEDIUM] Linux Kernel up to 5.10.177/5.15.106/6.1.23/6.2.10 iscsi_tcp iscsi_set_param null pointer dereference (Nessus ID 319448 / WID-SEC-2025-2187)
A vulnerability classified as critical was found in Linux Kernel up to 5.10.177/5.15.106/6.1.23/6.2.10. This impacts the function iscsi_set_param of the component iscsi_tcp. Such manipulation leads to null pointer dereference.
This vulnerability is uniquely identified as CVE-2023-53464. The attack can only be initiated within the local network. No exploit exists.
Upgrading the affected component is advised.
GHSA
GHSA-xwwx-gg4v-8gp7: In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
The validity
ghsa_unreviewed·2025-10-01
CVE-2023-53464 [MEDIUM] CWE-476 GHSA-xwwx-gg4v-8gp7: In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
The validity
In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
The validity of sock should be checked before assignment to avoid incorrect
values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref
while calling getpeername()") introduced this change which may lead to
inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.
Fix the issue by moving the position of the assignment.
OSV
CVE-2023-53464: In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of
osv·2025-10-01·CVSS 5.5
CVE-2023-53464 [MEDIUM] CVE-2023-53464: In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en. Fix the issue by moving the position of the assignment.
Red Hat
kernel: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2023-53464 [MEDIUM] CWE-476 kernel: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
kernel: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
The validity of sock should be checked before assignment to avoid incorrect
values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref
while calling getpeername()") introduced this change which may lead to
inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.
Fix the issue by moving the position of the assignment.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - No
Debian
CVE-2023-53464: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi...
vendor_debian·2023·CVSS 5.5
CVE-2023-53464 [MEDIUM] CVE-2023-53464: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi...
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en. Fix the issue by moving the position of the assignment.
Scope: local
bookworm: resolved (fixed in 6.1.25-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.25-1)
sid: resolved (fixed in 6.1.25-1)
trixie: resolved (fixed in 6.1.25-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/48b19b79cfa37b1e50da3b5a8af529f994c08901https://git.kernel.org/stable/c/499757ad3332e2527254f9ab68dec1da087b1d96https://git.kernel.org/stable/c/5e5c5f472972c4bc9430adc08b36763a0fa5b9f7https://git.kernel.org/stable/c/6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91https://git.kernel.org/stable/c/b287e21e73ec23f3788fbe40037c42dbe6e9a9a9
2025-10-01
Published