In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug.
Set the tcp_sw_host->session after we have completed session creation and can no longer fail.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-4.14.309-231.529Upgrade bpftoolUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Apr 25, 2025 | Mar 27, 2025 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2025 | Mar 20, 2023 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-lts-xenialUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-gcp-4.15Upgrade linux-ibm-5.4Upgrade linux-azure-fipsUpgrade linux-lowlatencyUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linuxUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-intel-iot-realtimeUpgrade linux-aws-hweUpgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-fipsUpgrade linux-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-awsUpgrade linux-xilinx-zynqmpUpgrade linux-azure-4.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-iotUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-azure-5.4Upgrade linux-gcp-5.15Upgrade linux-azure-fdeUpgrade linux-aws-5.15 | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub