Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

CVE-2023-53586: Linux kernel SCSI target may lose track of resets

CVE-2023-53586 · published 1 year ago
Summary

The SCSI target code in the Linux kernel could incorrectly report that a LUN reset cleared active operations, while the commands were still running. This can cause the storage initiator to restart those commands, leading to errors or aborted tasks. Updating to a kernel version that includes the fix and ensuring resets are processed one at a time will resolve the issue.

What to do
  • Update linux kernel to version 6.3.2.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1016.16.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1002.2.
  • Update canonical linux-oracle to version 5.15.0-1040.46.
  • Update canonical linux-raspi to version 5.15.0-1035.38.
  • Update canonical linux-aws-5.15 to version 5.15.0-1041.46~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1045.52~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1039.47~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-79.86~20.04.2.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1036.39~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1037.42~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-79.88~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1016.16~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1040.46~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1038.42~20.04.2.
  • Update canonical linux to version 5.15.0-79.86.
  • Update canonical linux-aws to version 5.15.0-1042.47.
  • Update canonical linux-azure to version 5.15.0-1045.52.
  • Update canonical linux-gcp to version 5.15.0-1039.47.
  • Update canonical linux-gke to version 5.15.0-1039.44.
  • Update canonical linux-gkeop to version 5.15.0-1025.30.
  • Update canonical linux-ibm to version 5.15.0-1035.38.
  • Update canonical linux-intel-iotg to version 5.15.0-1037.42.
  • Update canonical linux-kvm to version 5.15.0-1039.44.
  • Update canonical linux-lowlatency to version 5.15.0-79.88.
  • Update canonical linux-nvidia to version 5.15.0-1030.30.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
  • Update canonical linux-bluefield to version 5.15.0-1022.24.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1036.38.
  • Update canonical linux-realtime to version 5.15.0-1043.48.
  • Update debian linux to version 6.1.37-1.
  • Update debian linux to version 6.3.7-1.
  • Update canonical linux-azure-fde to version 5.15.0-1045.52.1.
  • Update linux linux to version e1f59cd18a10969d08a082264b557876ca38766e or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 4.11, < 5.10.180
>= 5.11, < 5.15.111
>= 5.16, < 6.1.28
>= 6.2, < 6.2.15
>= 6.3, < 6.3.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
– linux linux < e1f59cd18a10969d08a082264b557876ca38766e
4.11
Linux linux kernel >= 6.3.0, < 6.3.2
Fix: upgrade to 6.3.2
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1016.16
Fix: upgrade to 5.15.0-1016.16
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1002.2
Fix: upgrade to 5.15.0-1002.2
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1040.46
Fix: upgrade to 5.15.0-1040.46
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1035.38
Fix: upgrade to 5.15.0-1035.38
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Showing 50 of 171. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1041.46~20.04.1
Fix: upgrade to 5.15.0-1041.46~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1045.52~20.04.1
Fix: upgrade to 5.15.0-1045.52~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1039.47~20.04.1
Fix: upgrade to 5.15.0-1039.47~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-79.86~20.04.2
Fix: upgrade to 5.15.0-79.86~20.04.2
Ubuntu:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1036.39~20.04.1
Fix: upgrade to 5.15.0-1036.39~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1037.42~20.04.1
Fix: upgrade to 5.15.0-1037.42~20.04.1
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-79.88~20.04.1
Fix: upgrade to 5.15.0-79.88~20.04.1
Ubuntu:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1016.16~20.04.1
Fix: upgrade to 5.15.0-1016.16~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1040.46~20.04.1
Fix: upgrade to 5.15.0-1040.46~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1038.42~20.04.2
Fix: upgrade to 5.15.0-1038.42~20.04.2
Ubuntu:Pro:20.04:LTS canonical linux All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-kvm All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-79.86
Fix: upgrade to 5.15.0-79.86
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1042.47
Fix: upgrade to 5.15.0-1042.47
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1045.52
Fix: upgrade to 5.15.0-1045.52
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1045.52.1
Fix: upgrade to 5.15.0-1045.52.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1039.47
Fix: upgrade to 5.15.0-1039.47
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1039.44
Fix: upgrade to 5.15.0-1039.44
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1025.30
Fix: upgrade to 5.15.0-1025.30
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1035.38
Fix: upgrade to 5.15.0-1035.38
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1037.42
Fix: upgrade to 5.15.0-1037.42
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1039.44
Fix: upgrade to 5.15.0-1039.44
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-79.88
Fix: upgrade to 5.15.0-79.88
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1030.30
Fix: upgrade to 5.15.0-1030.30
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1025.29
Fix: upgrade to 5.15.0-1025.29
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1022.24
Fix: upgrade to 5.15.0-1022.24
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1036.38
Fix: upgrade to 5.15.0-1036.38
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1043.48
Fix: upgrade to 5.15.0-1043.48
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-intel All versions
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Debian:12 debian linux < 6.1.37-1
Fix: upgrade to 6.1.37-1
Debian:13 debian linux < 6.3.7-1
Fix: upgrade to 6.3.7-1
Original advisory text
scsi: target: Fix multiple LUN_RESET handling
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple LUN_RESET handling This fixes a bug where an initiator thinks a LUN_RESET has cleaned up running commands when it hasn't. The bug was added in commit 51ec502a3266 ("target: Delete tmr from list before processing"). The problem occurs when: 1. We have N I/O cmds running in the target layer spread over 2 sessions. 2. The initiator sends a LUN_RESET for each session. 3. session1's LUN_RESET loops over all the running commands from both sessions and moves them to its local drain_task_list. 4. session2's LUN_RESET does not see the LUN_RESET from session1 because the commit above has it remove itself. session2 also does not see any commands since the other reset moved them off the state lists. 5. sessions2's LUN_RESET will then complete with a successful response. 6. sessions2's inititor believes the running commands on its session are now cleaned up due to the successful response and cleans up the running commands from its side. It then restarts them. 7. The commands do eventually complete on the backend and the target starts to return aborted task statuses for them. The initiator will either throw a invalid ITT error or might accidentally lookup a new task if the ITT has been reallocated already. Fix the bug by reverting the patch, and serialize the execution of LUN_RESETs and Preempt and Aborts. Also prevent us from waiting on LUN_RESETs in core_tmr_drain_tmr_list, because it turns out the original patch fixed a bug that was not mentioned. For LUN_RESET1 core_tmr_drain_tmr_list can see a second LUN_RESET and wait on it. Then the second reset will run core_tmr_drain_tmr_list and see the first reset and wait on it resulting in a deadlock.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-415Double Free
Timeline
Published4 Oct 2025
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta