CVE-2023-53464

What it actually does

Invalid sock pointer passed to iscsi_set_param() without prior validation, resulting in inconsistent tcp_sw_conn->sendpage and conn->datadgst_en values that can trigger null pointer dereference or memory corruption.

Why it matters to the business

Potential kernel crashes or local privilege escalation on Linux systems using iSCSI over TCP, disrupting storage connectivity and increasing risk on servers or containers; low urgency given age and lack of known exploitation.

How an attack unfolds

An attacker with local access triggers the iscsi_tcp connection setup path, supplying an invalid socket so that the assignment occurs before validation, leaving inconsistent digest and sendpage state that later dereferences a null or corrupted pointer during data transfer or getpeername calls.

How to fix it

Update Linux kernel to version 5.10.178 or later commit 499757ad3332e2527254f9ab68dec1da087b1d96; rebuild and reboot affected systems; disable iSCSI TCP if immediate patching is impossible.

How to confirm the fix worked

Verify running kernel version is at least 5.10.178; inspect /proc/config.gz or build logs for presence of the fix commit; attempt iSCSI connection setup under controlled conditions and confirm no null dereference occurs.

Typical attack path

1. Obtain local code execution or user access on target Linux system
2. Initiate or manipulate an iSCSI TCP connection to reach the vulnerable assignment path
3. Force use of an invalid sock object before iscsi_set_param() validation
4. Trigger subsequent sendpage or digest operations to cause null dereference or corruption

How to detect it

Review kernel logs for oops/panic entries mentioning iscsi_tcp, iscsi_set_param, sendpage, or getpeername around the time of suspected activity; correlate with unusual iSCSI connection attempts from untrusted local processes.

What your security team should do

• Prioritize kernel updates on all systems exposing iSCSI TCP interfaces
• Monitor for kernel oops or panic logs related to iscsi_tcp
• Apply compensating controls such as network segmentation for iSCSI traffic until patched