CVE-2023-53360

MEDIUM EPSS 7.4%
Published Sep 17, 20259mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Sep 17, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: Rework scratch handling for READ_PLUS (again) I found that the read code might send multiple requests using the same nfs_pgio_header, but nfs4_proc_read_setup() is only called once. This is how we ended up occasionally double-freeing the scratch buffer, but also means we set a NULL pointer but non-zero length to the xdr scratch buffer. This results in an oops the first time decoding needs to copy something to scratch, which frequently happens when decoding READ_PLUS hole segments. I fix this by moving scratch handling into the pageio read code. I provide a function to allocate scratch space for decoding read replies, and free the scratch buffer when the nfs_pgio_header is freed.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
7.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-415

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel*≥6.4  –  <6.4.16
linuxlinux_kernel*≥6.5  –  <6.5.3

References 4

  • git.kernel.org https://git.kernel.org/stable/c/303a78052091c81e9003915c521fdca1c7e117af
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a2f4cb206bd94b3f4a7bb05fcdce9525283b5681
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/adac9f0ddd2b291c7ce41f549fdb27a13616cff5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ae5d5672f1db711e91db6f52df5cb16ecd8f5692
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/303a78052091c81e9003915c521fdca1c7e117af
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a2f4cb206bd94b3f4a7bb05fcdce9525283b5681
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/adac9f0ddd2b291c7ce41f549fdb27a13616cff5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ae5d5672f1db711e91db6f52df5cb16ecd8f5692
    Patch