Linux Distros Unpatched Vulnerability : CVE-2023-52515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/srp: Do not call scsidone from srpabort After scmdehaborthandler has called the SCSI LLD ehaborthandler callback, it performs one of the following actions:...

CVE-2023-52515

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:24+00:00| seen| https://t.me/ctinow/198493 2024-03-02 23:32:07+00:00| seen| https://t.me/ctinow/198513 2024-03-04 21:16:51+00:00| seen| https://t.me/ctinow/199600 2025-12-03 14:14:49+00:00| seen|...

CVE-2023-52515 RDMA/srp: Do not call scsi_done() from srp_abort()

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsidone from srpabort After scmdehaborthandler has called the SCSI LLD ehaborthandler callback, it performs one of the following actions: Call scsiqueueinsert. Call scsifinishcommand. Call scsiehscmdadd...

CVE-2023-52515

CVE-2023-52515 is a Linux kernel vulnerability in the RDMA/srp path. The issue occurs when SRP abort handling after scmd_eh_abort_handler() may call one of: scsi_queue_insert(), scsi_finish_command(), or scsi_eh_scmd_add(); if scsi_done() is invoked in srp_abort(), it can trigger a use-after-free...