CVE-2023-54184
A critical bug in the Linux kernel’s iSCSI target module can cause a use‑after‑free and a NULL pointer dereference when an iSCSI session is closed. The flaw could allow an attacker to crash the system or potentially execute arbitrary code. The kernel has already incorporated a fix that moves the cleanup of recovery entries before the session is freed.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, specifically the iSCSI target (scsi: target: iscsit) module. Any system running a kernel version before the fix, such as older distributions that ship with an unpatched kernel, is affected.
Real-world impact
An attacker could crash the kernel or gain arbitrary code execution by triggering the use‑after‑free during an iSCSI session teardown, potentially compromising the entire system.
Why this severity
The CVSS score of 9.8 reflects the lack of authentication or user interaction required, the high impact on confidentiality, integrity, and availability, and the ease of exploitation through a remote iSCSI connection.
What to do about it
- 01Upgrade your Linux kernel to a version that includes the fix.
- 02Reboot the system to load the new kernel.
NVD description indicates the kernel has resolved the issue.
Timeline
- Dec 30, 2025 · Dec 30, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 1d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.