In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi: Fix iscsi_task use after free
Commit d39df158518c ("scsi: iscsi: Have abort handler get ref to conn") added iscsi_get_conn()/iscsi_put_conn() calls during abort handling but then also changed the handling of the case where we detect an already completed task where we now end up doing a goto to the common put/cleanup code. This results in a iscsi_task use after free, because the common cleanup code will do a put on the iscsi_task.
This reverts the goto and moves the iscsi_get_conn() to after we've checked if the iscsi_task is valid.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-armUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-baseUpgrade kselftests-kmp-default | Aug 9, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub