Linux Distros Unpatched Vulnerability : CVE-2023-52515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/srp: Do not call scsidone from srpabort After scmdehaborthandler has called the SCSI LLD ehaborthandler callback, it performs one of the following actions:...

CVE-2023-52515

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:24+00:00| seen| https://t.me/ctinow/198493 2024-03-02 23:32:07+00:00| seen| https://t.me/ctinow/198513 2024-03-04 21:16:51+00:00| seen| https://t.me/ctinow/199600 2025-12-03 14:14:49+00:00| seen|...

CVE-2023-52515

CVE-2023-52515 affects the Linux kernel RDMA/srp path. The root cause is calling scsi_done() from srp_abort() after scmd_eh_abort_handler() runs, which could trigger a use-after-free via subsequent actions (scsi_queue_insert, scsi_finish_command, or scsi_eh_scmd_add). The fix removes the scsi_don...

CVE-2023-52515 RDMA/srp: Do not call scsi_done() from srp_abort()

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsidone from srpabort After scmdehaborthandler has called the SCSI LLD ehaborthandler callback, it performs one of the following actions: Call scsiqueueinsert. Call scsifinishcommand. Call scsiehscmdadd...