In the Linux kernel, the following vulnerability has been resolved:

scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()

The validity of sock should be checked before assignment to avoid incorrect
values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref
while calling getpeername()") introduced this change which may lead to
inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.

Fix the issue by moving the position of the assignment.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00027.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/48b19b79cfa37b1e50da3b5a8af529f994c08901 cve-icon cve-icon
https://git.kernel.org/stable/c/499757ad3332e2527254f9ab68dec1da087b1d96 cve-icon cve-icon
https://git.kernel.org/stable/c/5e5c5f472972c4bc9430adc08b36763a0fa5b9f7 cve-icon cve-icon
https://git.kernel.org/stable/c/6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91 cve-icon cve-icon
https://git.kernel.org/stable/c/b287e21e73ec23f3788fbe40037c42dbe6e9a9a9 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100107-CVE-2023-53464-a397@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53464 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53464 cve-icon
History

Thu, 02 Oct 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 02 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 01 Oct 2025 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en. Fix the issue by moving the position of the assignment.
Title scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-01T11:42:35.186Z

Reserved: 2025-10-01T11:39:39.400Z

Link: CVE-2023-53464

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-01T12:15:48.267

Modified: 2025-10-02T19:12:17.160

Link: CVE-2023-53464

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-01T00:00:00Z

Links: CVE-2023-53464 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-02T08:39:47Z

Weaknesses

No weakness.