CVE-2023-54184

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-54184
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54184.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-54184
Downstream
Related
Published
2025-12-30T12:08:54.528Z
Modified
2026-03-27T08:59:30.435791Z
Summary
scsi: target: iscsit: Free cmds before session free
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsit: Free cmds before session free

Commands from recovery entries are freed after session has been closed. That leads to use-after-free at command free or NPE with such call trace:

Time2Retain timer expired for SID: 1, cleaning up iSCSI session. BUG: kernel NULL pointer dereference, address: 0000000000000140 RIP: 0010:sbitmapqueueclear+0x3a/0xa0 Call Trace: targetreleasecmdkref+0xd1/0x1f0 [targetcoremod] transportgenericfreecmd+0xd1/0x180 [targetcoremod] iscsitfreecmd+0x53/0xd0 [iscsitargetmod] iscsitfreeconnectionrecoveryentries+0x29d/0x320 [iscsitargetmod] iscsitclosesession+0x13a/0x140 [iscsitargetmod] iscsitcheckpostdataout+0x440/0x440 [iscsitargetmod] calltimer_fn+0x24/0x140

Move cleanup of recovery enrties to before session freeing.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54184.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
988e3a85463d9b6dabc681df3f8f131b23c19953
Fixed
89f5055f9b0b57c7e7f02e32df95ef401f809b71
Fixed
4621e24c9257c6379343bf0c11b473817cf7edcd
Fixed
1911cca5916b6e106de7afa3ec0a38447158216c
Fixed
a7a4def6c7046e090bb10c6d550fdeb487db98ba
Fixed
4ce221d295f53e6c6b835ab33181e735482c9aac
Fixed
d8990b5a4d065f38f35d69bcd627ec5a7f8330ca

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54184.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.12.0
Fixed
5.4.244
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.181
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.113
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.30
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.3.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54184.json"