CVE-2023-54154
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix target_cmd_counter leak The target_cmd_counter struct allocated via target_alloc_cmd_counter() is never freed, resulting in leaks across various transport types, e.g.: unreferenced object 0xffff88801f920120 (size 96): comm "sh", pid 102, jiffies 4294892535 (age 713.412s) hex dump (first 32 bytes): 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 38 01 92 1f 80 88 ff ff ........8....... backtrace: [<00000000e58a6252>] kmalloc_trace+0x11/0x20 [<0000000043af4b2f>] target_alloc_cmd_counter+0x17/0x90 [target_core_mod] [<000000007da2dfa7>] target_setup_session+0x2d/0x140 [target_core_mod] [<0000000068feef86>] tcm_loop_tpg_nexus_store+0x19b/0x350 [tcm_loop] [<000000006a80e021>] configfs_write_iter+0xb1/0x120 [<00000000e9f4d860>] vfs_write+0x2e4/0x3c0 [<000000008143433b>] ksys_write+0x80/0xb0 [<00000000a7df29b2>] do_syscall_64+0x42/0x90 [<0000000053f45fb8>] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Free the structure alongside the corresponding iscsit_conn / se_sess parent.
How to fix
- Linux Linux1cd41d1669bcbc5052afa897f85608a62ff3fb30, f84639c5ac5f4f95b3992da1af4ff382ebf2e819, d14e3e553e05cb763964c991fe6acb0a6a1c6f9c, 6.1.55, 6.3, 6.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 76b77646f17118f5babe93c032e6b7a53bbde3b9 ≤ v < 1cd41d1669bcbc5052afa897f85608a62ff3fb30, becd9be6069e7b183c084f460f0eb363e43cc487 ≤ v < f84639c5ac5f4f95b3992da1af4ff382ebf2e819, becd9be6069e7b183c084f460f0eb363e43cc487 ≤ v < d14e3e553e05cb763964c991fe6acb0a6a1c6f9c, bc5ebf93ae23a928303b3643c6f4c4da2f769e7c, 1eaaf1b828cdaa58abccc68962d24005fd5e8852, 6.1.28 ≤ v < 6.1.55, 6.2.15 ≤ v < 6.3, 6.3.2 ≤ v < 6.4, 6.4 | 1cd41d1669bcbc5052afa897f85608a62ff3fb30, f84639c5ac5f4f95b3992da1af4ff382ebf2e819, d14e3e553e05cb763964c991fe6acb0a6a1c6f9c, 6.1.55, 6.3, 6.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.