In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsitcp: Check that sock is valid before iscsiset_param()
The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcpswconn->sendpage and conn->datadgsten.
Fix the issue by moving the position of the assignment.
{ "vanir_signatures": [ { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/iscsi_tcp.c", "function": "iscsi_sw_tcp_conn_set_param" }, "id": "CVE-2023-53464-3c9f11e6", "digest": { "length": 742.0, "function_hash": "102272772951741383143537046700831106770" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/iscsi_tcp.c", "function": "iscsi_sw_tcp_conn_set_param" }, "id": "CVE-2023-53464-54ef8c0d", "digest": { "length": 742.0, "function_hash": "102272772951741383143537046700831106770" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b287e21e73ec23f3788fbe40037c42dbe6e9a9a9" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/iscsi_tcp.c" }, "id": "CVE-2023-53464-725143bf", "digest": { "line_hashes": [ "91088617110914428006407730469956931647", "133922868531214851135832860241867429800", "251575882593465555742925852276235230155", "299774533557839718176124351049872628854", "284364391259963447520919113947522227884", "205174216741773690357460667202884913194", "291425761221550978980166431013574223254", "216769460336383798386650156472434256478", "256918017202681156328032405584991547868" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e06a68fbbfcd8576eee8f7139fa2b13c9b72e91" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/iscsi_tcp.c" }, "id": "CVE-2023-53464-951e266e", "digest": { "line_hashes": [ "91088617110914428006407730469956931647", "133922868531214851135832860241867429800", "251575882593465555742925852276235230155", "299774533557839718176124351049872628854", "284364391259963447520919113947522227884", "205174216741773690357460667202884913194", "291425761221550978980166431013574223254", "216769460336383798386650156472434256478", "256918017202681156328032405584991547868" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e5c5f472972c4bc9430adc08b36763a0fa5b9f7" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/iscsi_tcp.c" }, "id": "CVE-2023-53464-981c2733", "digest": { "line_hashes": [ "91088617110914428006407730469956931647", "133922868531214851135832860241867429800", "251575882593465555742925852276235230155", "299774533557839718176124351049872628854", "284364391259963447520919113947522227884", "205174216741773690357460667202884913194", "291425761221550978980166431013574223254", "216769460336383798386650156472434256478", "256918017202681156328032405584991547868" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b287e21e73ec23f3788fbe40037c42dbe6e9a9a9" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/iscsi_tcp.c" }, "id": "CVE-2023-53464-af817a97", "digest": { "line_hashes": [ "91088617110914428006407730469956931647", "133922868531214851135832860241867429800", "251575882593465555742925852276235230155", "299774533557839718176124351049872628854", "284364391259963447520919113947522227884", "205174216741773690357460667202884913194", "291425761221550978980166431013574223254", "216769460336383798386650156472434256478", "256918017202681156328032405584991547868" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48b19b79cfa37b1e50da3b5a8af529f994c08901" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/iscsi_tcp.c", "function": "iscsi_sw_tcp_conn_set_param" }, "id": "CVE-2023-53464-c2d172d5", "digest": { "length": 742.0, "function_hash": "102272772951741383143537046700831106770" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@499757ad3332e2527254f9ab68dec1da087b1d96" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/iscsi_tcp.c", "function": "iscsi_sw_tcp_conn_set_param" }, "id": "CVE-2023-53464-cb6cc469", "digest": { "length": 742.0, "function_hash": "102272772951741383143537046700831106770" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48b19b79cfa37b1e50da3b5a8af529f994c08901" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/iscsi_tcp.c", "function": "iscsi_sw_tcp_conn_set_param" }, "id": "CVE-2023-53464-d0e539b6", "digest": { "length": 742.0, "function_hash": "102272772951741383143537046700831106770" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e5c5f472972c4bc9430adc08b36763a0fa5b9f7" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/iscsi_tcp.c" }, "id": "CVE-2023-53464-e6874ff9", "digest": { "line_hashes": [ "91088617110914428006407730469956931647", "133922868531214851135832860241867429800", "251575882593465555742925852276235230155", "299774533557839718176124351049872628854", "284364391259963447520919113947522227884", "205174216741773690357460667202884913194", "291425761221550978980166431013574223254", "216769460336383798386650156472434256478", "256918017202681156328032405584991547868" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@499757ad3332e2527254f9ab68dec1da087b1d96" } ] }