CVE-2023-53464

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()

The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.

Fix the issue by moving the position of the assignment.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 884a788f065578bb640382279a83d1df433b13e6, < 499757ad3332e2527254f9ab68dec1da087b1d96; >= a26b0658751bb0a3b28386fca715333b104d32a2, < 5e5c5f472972c4bc9430adc08b36763a0fa5b9f7; >= 57569c37f0add1b6489e1a1563c71519daf732cf, < 6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91; >= 57569c37f0add1b6489e1a1563c71519daf732cf, < b287e21e73ec23f3788fbe40037c42dbe6e9a9a9; >= 57569c37f0add1b6489e1a1563c71519daf732cf, < 48b19b79cfa37b1e50da3b5a8af529f994c08901; 897dbbc57d71e8a34ec1af8e573a142de457da38; 0a0b861fce2657ba08ec356a74346b37ca4b2008; >= 5.10.150, < 5.10.178; >= 5.15.75, < 5.15.107; >= 5.19.17, < 5.20; >= 6.0.3, < 6.1
LinuxLinux6.1

References

Timeline

Published
Oct 1, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-534657.1In the Linux kernel, the following vulnerability has been resolved: soundwire: qcom: fix storing port config out-of-bounds The 'qcom_swrm_CVE-2023-534665.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit Always purge mcCVE-2023-534675.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() Do `kfrCVE-2023-534685.5In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in alloc_wbufs() kmemleak reported a sequence oCVE-2023-53479.1An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole CVE-2023-534705.5In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alCVE-2023-534717.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacyCVE-2023-534725.5In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM contCVE-2023-534737.8In the Linux kernel, the following vulnerability has been resolved: ext4: improve error handling from ext4_dirhash() The ext4_dirhash() wiCVE-2023-534745.5In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bank_map Thee maximum number of MCA banks CVE-2023-534755.5In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role pCVE-2023-534765.5In the Linux kernel, the following vulnerability has been resolved: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()