---
id: CVE-2023-53609
title: >-
  In the Linux kernel, the following vulnerability has been resolved:


  scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if
  dispatch failed"


  The "atomic_inc(&cmd->device->iorequest_cnt)" in scsi_queue_rq() would

  cause …
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if
  dispatch failed"


  The "atomic_inc(&cmd->device->iorequest_cnt)" in scsi_queue_rq() would

  cause …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.2, < 6.3.4'
  - linux_kernel = 6.4
patched:
  - linux_kernel 6.3.4
published: '2025-10-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:44.233'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53609'
references:
  - url: 'https://git.kernel.org/stable/c/35fe6fa57b994e7da222893adf0bb748d6055e73'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6ca9818d1624e136a76ae8faedb6b6c95ca66903'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00137
epssPercentile: 0.03105
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:35:54.558433Z'
ingestedAt: '2026-10-15T22:48:25.412Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"

The "atomic_inc(&cmd->device->iorequest_cnt)" in scsi_queue_rq() would
cause kernel panic because cmd->device may be freed after returning from
scsi_dispatch_cmd().

This reverts commit cfee29ffb45b1c9798011b19d454637d1b0fe87d.

## Affected

- `linux_kernel >= 6.2, < 6.3.4`
- `linux_kernel = 6.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.3.4`