Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2023-53643

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
07/10/2025
Última modificación:
08/10/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> nvme-tcp: don&amp;#39;t access released socket during error recovery<br /> <br /> While the error recovery work is temporarily failing reconnect attempts,<br /> running the &amp;#39;nvme list&amp;#39; command causes a kernel NULL pointer dereference<br /> by calling getsockname() with a released socket.<br /> <br /> During error recovery work, the nvme tcp socket is released and a new one<br /> created, so it is not safe to access the socket without proper check.

Impacto