CVE-2023-54154

What it actually does

The vulnerability causes a memory leak where the target_cmd_counter struct allocated via target_alloc_cmd_counter is never freed when sessions are torn down, affecting multiple transport types in the SCSI target core.

Why it matters to the business

Prolonged use of SCSI target functionality leads to gradual memory exhaustion, increasing operational costs for restarts, reducing system availability, and potentially requiring downtime on affected Linux systems and dependent packages.

How an attack unfolds

An attacker repeatedly triggers session setup operations through configuration interfaces to allocate target_cmd_counter objects without corresponding frees, accumulating unreferenced memory until resource limits are reached. No named threat actors or ransomware campaigns are associated with this issue.

How to fix it

Update the Linux kernel to version 6.1.55 or apply commit 1cd41d1669bcbc5052afa897f85608a62ff3fb30. Update github.com/jasonlovesdoggo/abacus to 0.0.0-20250302043802-898ff1204e11.

How to confirm the fix worked

Enable kernel memory debugging tools such as kmemleak and confirm no unreferenced target_cmd_counter objects remain after session teardown; verify fixed versions are running and test session lifecycle operations for memory stability.

Typical attack path

1. Access or influence SCSI target configuration to initiate repeated session creation
2. Trigger target_setup_session which calls target_alloc_cmd_counter without later freeing the structure
3. Accumulate leaked kernel memory objects across multiple operations until exhaustion occurs

How to detect it

Inspect kernel logs and memory leak reports for unreferenced target_cmd_counter allocations during session setup via configfs or similar interfaces; correlate with high memory usage in processes interacting with target_core_mod.

What your security team should do

• Apply kernel and package updates to the listed fixed versions without delay
• Restrict access to SCSI target configuration interfaces until patches are deployed
• Monitor systems using target_core_mod for memory growth patterns during normal operation