DEBIAN-CVE-2023-53609

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2023-53609

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53609.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2023-53609

Upstream

CVE-2023-53609

Published

2025-10-04T16:15:57.647Z

Modified

2025-11-19T02:04:29.525020Z

Summary

[none]

Details

In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: core: Do not increase scsidevice's iorequestcnt if dispatch failed" The "atomicinc(&cmd->device->iorequestcnt)" in scsiqueuerq() would cause kernel panic because cmd->device may be freed after returning from scsidispatchcmd(). This reverts commit cfee29ffb45b1c9798011b19d454637d1b0fe87d.

References

https://security-tracker.debian.org/tracker/CVE-2023-53609

Affected packages

Debian:13 / linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.3.7-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.3.7-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}