CVE-2023-53615: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53615 was discovered in the Linux kernel, specifically affecting the qla2xxx SCSI driver. The vulnerability was published on October 4, 2025. The issue involves a deletion race condition in the SCSI subsystem that can lead to system crashes when using a debug kernel (NVD, Ubuntu).

The vulnerability stems from a link list corruption caused by session deletion being allowed to queue up twice. The issue manifests when the same port is allowed to double queue for deletion on different CPUs, as evidenced by internal traces showing identical deletion scheduling for the same session (RedHat).

When exploited, this vulnerability can cause system crashes in debug kernel configurations due to link list corruption. The issue specifically affects systems running the qla2xxx SCSI driver (NVD).

The issue has been fixed by moving the clearing/setting of the deleted flag lock. Several Linux distributions have released patches, including Ubuntu which has fixed the vulnerability in multiple kernel versions such as linux-azure 5.15.0-1056.64 for 22.04 LTS and linux-kvm 5.15.0-1050.55 for 22.04 LTS (Ubuntu).