CVE-2023-53609
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-53609
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53609.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-53609
- Downstream
- Published
- 2025-10-04T15:44:18.151Z
- Modified
- 2025-11-20T02:02:46.231212Z
- Summary
- scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
scsi: Revert "scsi: core: Do not increase scsidevice's iorequestcnt if dispatch failed"
The "atomicinc(&cmd->device->iorequestcnt)" in scsiqueuerq() would cause kernel panic because cmd->device may be freed after returning from scsidispatchcmd().
This reverts commit cfee29ffb45b1c9798011b19d454637d1b0fe87d.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedcfee29ffb45b1c9798011b19d454637d1b0fe87dFixed35fe6fa57b994e7da222893adf0bb748d6055e73
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedcfee29ffb45b1c9798011b19d454637d1b0fe87dFixed6ca9818d1624e136a76ae8faedb6b6c95ca66903