CVE-2023-52974: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52974 is a use-after-free (UAF) vulnerability discovered in the Linux kernel's iSCSI TCP implementation. The vulnerability occurs during login when accessing the shost ipaddress. The issue was disclosed on March 27, 2025, affecting multiple versions of the Linux kernel from 4.14 through 6.1 (NVD).

The vulnerability occurs when iscsiswtcpsessioncreate() fails during iscsitcpr2tpoolalloc(), allowing userspace to access the host's ipaddress attribute. If the session is freed via iscsisession_teardown() while userspace is still accessing the session, a use-after-free condition occurs. The vulnerability has received a CVSS v3.1 base score of 7.8 (High) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (CISA-ADP).

The vulnerability can lead to a complete compromise of system confidentiality, integrity, and availability through local access. With a CVSS score of 7.8, it is considered a high-severity issue that could potentially allow attackers to execute arbitrary code with elevated privileges (CISA-ADP).

The vulnerability has been fixed in the Linux kernel by modifying the tcpswhost->session assignment to occur after session creation is complete and can no longer fail. Multiple patches have been released for different kernel versions (NVD).