CVE-2023-2162

A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2023-04-19

Last modified

2025-03-19

Weaknesses

CWE-416

Affected products

• Linux Kernel (Linux)

References

• https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
• https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
• https://www.spinics.net/lists/linux-scsi/msg181542.html