CVE-2023-53643
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
07/10/2025
Última modificación:
08/10/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
nvme-tcp: don&#39;t access released socket during error recovery<br />
<br />
While the error recovery work is temporarily failing reconnect attempts,<br />
running the &#39;nvme list&#39; command causes a kernel NULL pointer dereference<br />
by calling getsockname() with a released socket.<br />
<br />
During error recovery work, the nvme tcp socket is released and a new one<br />
created, so it is not safe to access the socket without proper check.



