CVE-2023-53464

scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 23, 2026
Reserved: Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()

The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.

Fix the issue by moving the position of the assignment.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	884a788f065578bb640382279a83d1df433b13e6 to before 499757ad3332e2527254f9ab68dec1da087b1d96Affected a26b0658751bb0a3b28386fca715333b104d32a2 to before 5e5c5f472972c4bc9430adc08b36763a0fa5b9f7Affected 57569c37f0add1b6489e1a1563c71519daf732cf to before 6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91Affected 57569c37f0add1b6489e1a1563c71519daf732cf to before b287e21e73ec23f3788fbe40037c42dbe6e9a9a9Affected 57569c37f0add1b6489e1a1563c71519daf732cf to before 48b19b79cfa37b1e50da3b5a8af529f994c08901Affected 897dbbc57d71e8a34ec1af8e573a142de457da38Affected 0a0b861fce2657ba08ec356a74346b37ca4b2008Affected 5.10.150 to before 5.10.178Affected 5.15.75 to before 5.15.107Affected 5.19.17 to before 5.20Affected 6.0.3 to before 6.1Affected
LinuxLinux	6.1Affected before 6.1Not affected 5.10.178 through 5.10.Not affected 5.15.107 through 5.15.Not affected 6.1.24 through 6.1.Not affected 6.2.11 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

884a788f065578bb640382279a83d1df433b13e6 to before 499757ad3332e2527254f9ab68dec1da087b1d96Affected
a26b0658751bb0a3b28386fca715333b104d32a2 to before 5e5c5f472972c4bc9430adc08b36763a0fa5b9f7Affected
57569c37f0add1b6489e1a1563c71519daf732cf to before 6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91Affected
57569c37f0add1b6489e1a1563c71519daf732cf to before b287e21e73ec23f3788fbe40037c42dbe6e9a9a9Affected
57569c37f0add1b6489e1a1563c71519daf732cf to before 48b19b79cfa37b1e50da3b5a8af529f994c08901Affected
897dbbc57d71e8a34ec1af8e573a142de457da38Affected
0a0b861fce2657ba08ec356a74346b37ca4b2008Affected
5.10.150 to before 5.10.178Affected
5.15.75 to before 5.15.107Affected
5.19.17 to before 5.20Affected
6.0.3 to before 6.1Affected

LinuxLinux

6.1Affected
before 6.1Not affected
5.10.178 through 5.10.*Not affected
5.15.107 through 5.15.*Not affected
6.1.24 through 6.1.*Not affected
6.2.11 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.