Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H H H 7.8 .0061 46.7 —
AFFECTED Product Versions Fixed Linux d8536670916a685df116b5c2cb256573fd25e4e3 – — Linux 3.7 – 5.10.199
TIMELINE Feb 20 Reserved by Linux Mar 2 Published (CNA: Linux) Aug 4 RESCORED — CVE-2023-52515 (Linux). CVSS 9.8 → 7.8 (NVD).
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.
| Date | Event | Detail |
|---|---|---|
| February 20, 2024 | Reserved | Reserved by Linux |
| March 2, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2023-52515 (Linux). CVSS 9.8 → 7.8 (NVD). |
Authoritative record: CVE-2023-52515 at cve.org
Vendors: linux
Weaknesses: CWE-416
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-52515 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.