PT-2025-13320 · Linux+3 · Linux Kernel+3

Published 2023-01-17 · Updated 2025-06-25 · CVE-2023-52974

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue occurs in the Linux kernel when accessing the shost ipaddress during login. This happens when iscsi sw tcp session create() fails, and iscsi tcp r2tpool alloc() is accessed by userspace while the session is being freed via iscsi session teardown(). The issue is resolved by setting tcp sw host->session after completing session creation.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the use-after-free bug in the iscsi tcp module. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-06252

CVE-2023-52974

OPENSUSE-SU-2025_1195-1

OPENSUSE-SU-2025_1263-1

RHSA-2024:0431

RHSA-2024:0432

RHSA-2024:0575

SUSE-SU-2025:02099-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_02099-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1512

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52974.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52974 · Vendor Advisory
• https://git.kernel.org/stable/c/9758ffe1c07b86aefd7ca8e40d9a461293427ca0 · Patch
• https://git.kernel.org/stable/c/496af9d3682ed4c28fb734342a09e6cc0c056ea4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52974 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d4d765f4761f9e3a2d62992f825aeee593bcb6b9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52974 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52974 · Vendor Advisory
• https://git.kernel.org/stable/c/6abd4698f4c8a78e7bbfc421205c060c199554a0 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52974 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory