Description (CNA)
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Kernel | affected Linux Kernel version prior to Kernel 6.2 RC6 |
CWE
CWE-416
References
- https://www.spinics.net/lists/linux-scsi/msg181542.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.