PT-2025-13321 · Linux+6 · Linux Kernel+6

Published 2023-01-17 · Updated 2026-03-14 · CVE-2023-52975

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability has been identified in the Linux kernel, specifically in the iscsi tcp module. This issue occurs during iSCSI session logout when another task accesses the shost ipaddress attribute, resulting in a potential KASAN use-after-free report. The vulnerability is related to the iscsi sw tcp host get param function and the show host param ISCSI HOST PARAM IPADDRESS function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-06806

CVE-2023-52975

OPENSUSE-SU-2025_1195-1

RHSA-2024:0431

RHSA-2024:0432

RHSA-2024:0575

SUSE-SU-2025:01983-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

USN-7684-1

USN-7684-2

USN-7684-3

USN-7685-1

USN-7685-2

USN-7685-3

USN-7685-4

USN-7685-5

USN-7701-1

USN-7701-2

USN-7701-3

USN-7819-1

USN-7819-2

USN-7832-1

USN-7911-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1682

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52975.json · Exploit
• https://ubuntu.com/security/CVE-2023-52975 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7685-5 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50073 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7684-3 · Vendor Advisory
• https://git.kernel.org/stable/c/6f1d64b13097e85abda0f91b5638000afc5f9a06 · Patch
• https://ubuntu.com/security/notices/USN-7819-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7685-5 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7684-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52975 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7684-2 · Vendor Advisory
• https://git.kernel.org/stable/c/17b738590b97fb3fc287289971d1519ff9b875a1 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38683 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7684-2 · Vendor Advisory