CVE-2023-52515

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-52515
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52515.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-52515
Downstream
Related
Published
2024-03-02T21:52:25.863Z
Modified
2026-03-14T12:16:48.262245Z
Summary
RDMA/srp: Do not call scsi_done() from srp_abort()
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/srp: Do not call scsidone() from srpabort()

After scmdehaborthandler() has called the SCSI LLD ehaborthandler callback, it performs one of the following actions: * Call scsiqueueinsert(). * Call scsifinishcommand(). * Call scsiehscmdadd(). Hence, SCSI abort handlers must not call scsidone(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsidone() call from srpabort(). Keep the srpfree_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52515.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d8536670916a685df116b5c2cb256573fd25e4e3
Fixed
26788a5b48d9d5cd3283d777d238631c8cd7495a
Fixed
b9bdffb3f9aaeff8379c83f5449c6b42cb71c2b5
Fixed
2b298f9181582270d5e95774e5a6c7a7fb5b1206
Fixed
05a10b316adaac1f322007ca9a0383b410d759cc
Fixed
e193b7955dfad68035b983a0011f4ef3590c85eb
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
738589592a04180e39b6fb5fe8205d85b7dc69f6
Last affected
0575df129e2eb4a801beae0e6e041787480f42b9
Last affected
22fb582405002812d8fb89d0ed1264e97d3d25ad
Last affected
39d6594c457c4728794cb4c3c7be53f93f1ef3ae
Last affected
b3f3b814add77a464911df0080d812b18f61ff38

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52515.json"