PT-2023-2686 · Linux+9 · Linux Kernel+9

Mike Christie · Published 2023-01-17 · Updated 2025-06-25 · CVE-2023-2162

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use-after-free vulnerability was found in the iscsi sw tcp session create function in the drivers/scsi/iscsi tcp.c file of the SCSI sub-component. This flaw is due to incorrect error handling returned by iscsi tcp r2tpool alloc(), allowing an attacker to leak kernel internal information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2024:0113

ALT-PU-2023-1434

ALT-PU-2023-1539

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-26341

BDU:2023-02528

CESA-2024_0113

CESA-2024_0134

CVE-2023-2162

DLA-3403-1

DLA-3404-1

OESA-2023-1293

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

OPENSUSE-SU-2025_1195-1

OPENSUSE-SU-2025_1263-1

RHSA-2024:0113

RHSA-2024:0134

RHSA-2024:0402

RHSA-2024:0403

RHSA-2024:0412

RHSA-2024:0431

RHSA-2024:0432

RHSA-2024:0439

RHSA-2024:0448

RHSA-2024:0562

RHSA-2024:0563

RHSA-2024:0575

RHSA-2024_0113

RHSA-2024_0134

RLSA-2024:0134

SUSE-SU-2023:2146-1

SUSE-SU-2023:2147-1

SUSE-SU-2023:2148-1

SUSE-SU-2023:2151-1

SUSE-SU-2023:2156-1

SUSE-SU-2023:2162-1

SUSE-SU-2023:2163-1

SUSE-SU-2023:2232-1

SUSE-SU-2023:2368-1

SUSE-SU-2023:2369-1

SUSE-SU-2023:2371-1

SUSE-SU-2023:2376-1

SUSE-SU-2023:2384-1

SUSE-SU-2023:2386-1

SUSE-SU-2023:2389-1

SUSE-SU-2023:2395-1

SUSE-SU-2023:2399-1

SUSE-SU-2023:2401-1

SUSE-SU-2023:2405-1

SUSE-SU-2023:2415-1

SUSE-SU-2023:2416-1

SUSE-SU-2023:2420-1

SUSE-SU-2023:2422-1

SUSE-SU-2023:2423-1

SUSE-SU-2023:2425-1

SUSE-SU-2023:2428-1

SUSE-SU-2023:2431-1

SUSE-SU-2023:2442-1

SUSE-SU-2023:2443-1

SUSE-SU-2023:2448-1

SUSE-SU-2023:2453-1

SUSE-SU-2023:2455-1

SUSE-SU-2023:2459-1

SUSE-SU-2023:2468-1

SUSE-SU-2023:2500-1

SUSE-SU-2023:2506-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2653-1

SUSE-SU-2023:2782-1

SUSE-SU-2023:2805-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

SUSE-SU-2025:02099-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_02099-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

USN-6079-1

USN-6080-1

USN-6081-1

USN-6084-1

USN-6085-1

USN-6090-1

USN-6091-1

USN-6092-1

USN-6094-1

USN-6095-1

USN-6096-1

USN-6109-1

USN-6118-1

USN-6132-1

USN-6133-1

USN-6134-1

USN-6222-1

USN-6254-1

USN-6256-1

USN-6385-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 2362

• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0113 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2395-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1872 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6092-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2420-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1206 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6133-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2151-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1998 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3903 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6385-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6080-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-26545 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-35001 · Vendor Advisory