In the Linux kernel, the following vulnerability has been resolved:

scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()

The validity of sock should be checked before assignment to avoid incorrect
values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref
while calling getpeername()") introduced this change which may lead to
inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.

Fix the issue by moving the position of the assignment.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00023.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
884a788f065578bb640382279a83d1df433b13e6 affected < 499757ad3332e2527254f9ab68dec1da087b1d96
a26b0658751bb0a3b28386fca715333b104d32a2 affected < 5e5c5f472972c4bc9430adc08b36763a0fa5b9f7
57569c37f0add1b6489e1a1563c71519daf732cf affected < 6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91
57569c37f0add1b6489e1a1563c71519daf732cf affected < b287e21e73ec23f3788fbe40037c42dbe6e9a9a9
57569c37f0add1b6489e1a1563c71519daf732cf affected < 48b19b79cfa37b1e50da3b5a8af529f994c08901
897dbbc57d71e8a34ec1af8e573a142de457da38 affected —
0a0b861fce2657ba08ec356a74346b37ca4b2008 affected —
Linux Linux affected
Version Status Constraints
6.1 affected —
0 unaffected < 6.1
5.10.178 unaffected ≤ 5.10.*
5.15.107 unaffected ≤ 5.15.*
6.1.24 unaffected ≤ 6.1.*
6.2.11 unaffected ≤ 6.2.*
6.3 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/48b19b79cfa37b1e50da3b5a8af529f994c08901 cve-icon cve-icon
https://git.kernel.org/stable/c/499757ad3332e2527254f9ab68dec1da087b1d96 cve-icon cve-icon
https://git.kernel.org/stable/c/5e5c5f472972c4bc9430adc08b36763a0fa5b9f7 cve-icon cve-icon
https://git.kernel.org/stable/c/6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91 cve-icon cve-icon
https://git.kernel.org/stable/c/b287e21e73ec23f3788fbe40037c42dbe6e9a9a9 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100107-CVE-2023-53464-a397@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53464 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53464 cve-icon
History

Tue, 20 Jan 2026 16:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 02 Oct 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 02 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 01 Oct 2025 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en. Fix the issue by moving the position of the assignment.
Title scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-01T11:42:35.186Z

Reserved: 2025-10-01T11:39:39.400Z

Link: CVE-2023-53464

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-10-01T12:15:48.267

Modified: 2026-01-20T15:56:33.927

Link: CVE-2023-53464

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-01T00:00:00Z

Links: CVE-2023-53464 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-02T08:39:47Z

Weaknesses