CVE-2023-53536

HIGH EPSS 4.2%
Published Oct 4, 20259mo ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Oct 4, 2025 9mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blk_crypto_evict_key() more robust If blk_crypto_evict_key() sees that the key is still in-use (due to a bug) or that ->keyslot_evict failed, it currently just returns while leaving the key linked into the keyslot management structures. However, blk_crypto_evict_key() is only called in contexts such as inode eviction where failure is not an option. So actually the caller proceeds with freeing the blk_crypto_key regardless of the return value of blk_crypto_evict_key(). These two assumptions don't match, and the result is that there can be a use-after-free in blk_crypto_reprogram_all_keys() after one of these errors occurs. (Note, these errors *shouldn't* happen; we're just talking about what happens if they do anyway.) Fix this by making blk_crypto_evict_key() unlink the key from the keyslot management structures even on failure. Also improve some comments.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
4.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥5.8  –  <5.10.180
linuxlinux_kernel*≥5.11  –  <5.15.111
linuxlinux_kernel*≥5.16  –  <6.1.28
linuxlinux_kernel*≥6.2  –  <6.2.15
linuxlinux_kernel*≥6.3  –  <6.3.2

References 6

  • git.kernel.org https://git.kernel.org/stable/c/5bb4005fb667c6e2188fa87950f8d5faf2994410
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5c62852942667c613de0458fc797c5b8c36112b5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5c7cb94452901a93e90c2230632e2c12a681bc92
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/64ef787bb1588475163069c2e62fdd8f6c27b1f6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/701a8220762ff90615dc91d3543f789391b63298
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/809a5be62e92a444a3c3d7b9f438019d0b322f55
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/5bb4005fb667c6e2188fa87950f8d5faf2994410
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5c62852942667c613de0458fc797c5b8c36112b5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5c7cb94452901a93e90c2230632e2c12a681bc92
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/64ef787bb1588475163069c2e62fdd8f6c27b1f6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/701a8220762ff90615dc91d3543f789391b63298
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/809a5be62e92a444a3c3d7b9f438019d0b322f55
    Patch