kernel: scsi: target: iscsi: Fix a race condition between login_work and the login thread

A flaw was found in the iSCSI target component in the Linux kernel. An attacker that can send specific data immediately after a login Protocol Data Unit PDU, can trigger a race condition. This condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a denial ...

Windows iSCSI Target Unauthorized Access

The vulnerability of the Windows iSCSI Target service for Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2023:2162-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2162-1 advisory. The SUSE Linux Enterprise 12 SP5 AZURE kernel was updated to receive various security and bugfixes. The following security bugs wer...

Critical Photon OS Security Update - PHSA-2023-3.0-0578

Updates of 'etcd', 'mysql', 'gnuplot', 'open-iscsi', 'cloud-init', 'runc' packages of Photon OS have been released...

How to Change the Software Open iSCSI IQN in XenServer

This article contains information about how to identify and change the software iSCSI initiator IQN. By default a random IQN is generated when you install XenServer formerly Citrix Hypervisor. The IQN is a requirement when running iSCSI to identify the XenServer host on the iSCSI network. It is...

CVE-2023-24945

Windows iSCSI Target Service Information Disclosure Vulnerability...

CVE-2023-24945

Windows iSCSI Target Service Information Disclosure Vulnerability...

Information disclosure

Windows iSCSI Target Service Information Disclosure Vulnerability...

CVE-2023-24945

CVE-2023-24945 concerns Windows iSCSI Target Service Information Disclosure. Data shows CVSS v3.1 base score 5.5 (Medium) with LOCAL attacker, LOW complexity, LOW privileges required, and high confidentiality impact. The description names the Windows iSCSI Target Service but does not provide spec...

CVE-2023-24945 Windows iSCSI Target Service Information Disclosure Vulnerability

...

CVE-2023-24945 Windows iSCSI Target Service Information Disclosure Vulnerability

...

kernel: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()

A flaw was found in the iSCSI TCP component in the Linux kernel. A race condition between releasing a socket and accessing it via sysfs can lead to a NULL pointer dereference when calling getpeername. This issue can cause a crash and result in a denial of service...

Windows iSCSI Target Service Information Disclosure Vulnerability

...

CVE-2023-24945: Integer Overflow or Wraparound

Windows iSCSI Target Service Information Disclosure Vulnerability...

PT-2025-40144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s iSCSI over TCP implementation. Specifically, a NULL pointer dereference can occur during socket access when freeing the socket concurrently with...

Microsoft Windows iSCSI Target Service security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows iSCSI Target Service. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versi...

PT-2025-26141 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, related to the SCSI device removal while in active use. When a SCSI device is removed, the kernel would immediately return an error on...

A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.

...

AZL-26341 CVE-2023-2162 affecting package kernel for versions less than 5.15.111.1-1

A use-after-free vulnerability was found in iscsiswtcpsessioncreate in drivers/scsi/iscsitcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information...

DEBIAN-CVE-2023-2162

A use-after-free vulnerability was found in iscsiswtcpsessioncreate in drivers/scsi/iscsitcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information...