CVE-2023-52974

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.

• linux linux kernel (< 4.14.306) • linux linux kernel (>= 4.15 < 4.19.273) • linux linux kernel (>= 4.20 < 5.4.232) • linux linux kernel (>= 5.5 < 5.10.168) • linux linux kernel (>= 5.11 < 5.15.93) • linux linux kernel (>= 5.16 < 6.1.11) • linux linux kernel 6.2