Linux Distros Unpatched Vulnerability : CVE-2023-52515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/srp: Do not call scsidone from srpabort After scmdehaborthandler has called the SCSI LLD ehaborthandler callback, it performs one of the following actions:...

CVE-2023-52515 RDMA/srp: Do not call scsi_done() from srp_abort()

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsidone from srpabort After scmdehaborthandler has called the SCSI LLD ehaborthandler callback, it performs one of the following actions: Call scsiqueueinsert. Call scsifinishcommand. Call scsiehscmdadd...

CVE-2023-52515

CVE-2023-52515 affects the Linux kernel RDMA/srp path. The root cause is calling scsi_done() from srp_abort() after scmd_eh_abort_handler() runs, which could trigger a use-after-free via subsequent actions (scsi_queue_insert, scsi_finish_command, or scsi_eh_scmd_add). The fix removes the scsi_don...