In the Linux kernel, the following vulnerability has been resolved:
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()") introduced this change which may lead to inconsistent values of tcp_sw_conn->sendpage and conn->datadgst_en.
Fix the issue by moving the position of the assignment.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-gcpUpgrade linuxUpgrade linux-xilinx-zynqmp | Oct 10, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub