Strix
26.1K

CVE-2023-53990

HIGHCVSS 7.8/10EPSS 0.18%

Last modified

CVE-2023-53990 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close function has a critical section which modifies the deferred close file list. We must acquire deferred_lock before calling cifs_del_deferred_close function.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close function has a critical section which modifies the deferred close file list. We must acquire deferred_lock before calling cifs_del_deferred_close function.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.18%

7.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 860efae127888ae535bc4eda1b7f27642727c69e, < 0f87e18203bd30f71eb1a65259e28e291b6cc43a; >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde, < 3aa9d065b0685b4e6052f3f2a2462966fdc44fd2; >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde, < cb36365dac25d546ca4af0eb22acb43c9b4ddfdf; >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde, < 32a046ccaeea6c19965c04a4c521e703f6607924; >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde, < ab9ddc87a9055c4bebd6524d5d761d605d52e557; 60b6d38add7b9c17d6e5d49ee8e930ea1a5650c5; >= 5.15.63, < 5.15.111; >= 5.19.4, < 5.20
LinuxLinux6.0

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2023-53990?
In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close function has a critical section which modifies the deferred close file list. We must acquire deferred_lock before calling cifs_del_deferred_close function.
How severe is CVE-2023-53990?
CVE-2023-53990 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2023-53990?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-53990?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST