CVE-2023-53055

MEDIUM EPSS 5.5%
Published May 2, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 2, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete() fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landlock LSM don't get evicted until security_sb_delete(), this means that fscrypt_destroy_keyring() must be called *after* security_sb_delete(). This fixes a WARN_ON followed by a NULL dereference, only possible if Landlock was being used on encrypted files.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
5.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥5.10.154  –  <5.11
linuxlinux_kernel*≥5.15.78  –  <5.15.105
linuxlinux_kernel*≥6.0.8  –  <6.1.22
linuxlinux_kernel*≥6.2  –  <6.2.9
linuxlinux_kernel6.3any
linuxlinux_kernel6.3any
linuxlinux_kernel6.3any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/497ab5d9c7852dfedab2c9de75e41b60e54b7c5d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/992a3f3e8a0c92151dfdf65fc85567c865fd558a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d77531fac6a1fd9f1db0195438ba5419d72b96c4
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/497ab5d9c7852dfedab2c9de75e41b60e54b7c5d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/992a3f3e8a0c92151dfdf65fc85567c865fd558a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d77531fac6a1fd9f1db0195438ba5419d72b96c4
    Patch