CVE-2023-53241
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-12-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 4.14 (inc) to 5.10.220 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.154 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.24 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.2.11 (exc) |
| linux | linux_kernel | 6.3 |
| linux | linux_kernel | 6.3 |
| linux | linux_kernel | 6.3 |
| linux | linux_kernel | 6.3 |
| linux | linux_kernel | 6.3 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-401 | The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's NFS server (nfsd) occurs because the function op_release is not called when an operation function (op_func) returns an error for certain "trivial" replies. Normally, nfsd4_encode_operation shortcuts encoding work and skips calling op_release, which can lead to a memory leak in the layoutget codepath if an error happens at the wrong time. The fix ensures that op_release is always called, even when there is an error, preventing the memory leak.
How can this vulnerability impact me? :
This vulnerability can cause a memory leak in the Linux kernel's NFS server when certain errors occur. Memory leaks can degrade system performance over time, potentially leading to resource exhaustion and system instability or crashes if the leak is severe and persistent.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Linux kernel to a version where the nfsd component has been patched to always call op_release even when op_func returns an error. This prevents memory leaks in the layoutget codepath. Ensure that your system is running the latest kernel updates from your distribution that include this fix.