CVE-2023-53131

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53131
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7 Patch
https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171 Patch
https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638d Patch
https://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370 Patch
https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
History

10 Nov 2025, 17:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7 - () https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7 - Patch
References () https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171 - () https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171 - Patch
References () https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638d - () https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638d - Patch
References () https://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370 - () https://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370 - Patch
References () https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a - () https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a - Patch
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*

05 May 2025, 20:54

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: SUNRPC: Se corrige una fuga de información al apagar el servidor. Se corrige una ejecución donde kthread_stop() podría impedir que se llame a threadfn. Si esto ocurre, svc_rqst no se limpiará.

02 May 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-02 16:15

Updated : 2025-11-10 17:40

NVD link : CVE-2023-53131

Mitre link : CVE-2023-53131

CVE.ORG link : CVE-2023-53131

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime