CVE-2023-2162

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	Kernel	Linux Kernel version prior to Kernel 6.2 RC6

References

Timeline

Published: Apr 19, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-216205.5FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure CVE-2023-216217.8FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a CVE-2023-216227.8FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitra CVE-2023-216245.5Information disclosure in DSP Services while loading dynamic module.CVE-2023-216257.5Information disclosure in Network Services due to buffer over-read while the device receives DNS response.CVE-2023-216267.1Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.CVE-2023-216277.8Memory corruption in Trusted Execution Environment while calling service API with invalid address.CVE-2023-216287.8Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.CVE-2023-216296.8Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.CVE-2023-21638.8Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary CVE-2023-216307.8Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.CVE-2023-216319.8Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.