CVE-2023-52975
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 27, 2025
Updated: Apr 1, 2025
CWE ID 416
Summary
CVE-2023-52975 is a Linux kernel vulnerability affecting the iSCSI subsystem. During iSCSI session logout, if another task accesses the shost ipaddress attr, it can cause a use-after-free (UAF) issue. The affected function is _raw_spin_lock_bh, located in the iscsi_sw_tcp_host_get_param function within the scsi_transport_iscsi module. This vulnerability can lead to a kernel crash and potential system instability. The issue was discovered and reported by Ding Hui.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.