CVE-2023-53360 NFSv4.2: Rework scratch handling for READ_PLUS (again)

🗓️ 17 Sep 2025 14:56:50Reported by LinuxType

Fix double free and NULL-length scratch in READ_PLUS by moving scratch handling to pageio reads and freeing with nfs_pgio_header.

Reporter	Title	Published	Views	Family All 82
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the functions nfs4_read_done() and nfs42_read_plus_support() in the fs/nfs/nfs4proc.c driver of the Linux operating system’s file system allows a attacker to cause a service failure.	18 Mar 202600:00	–	bdu_fstec
Circl	CVE-2023-53360	17 Sep 202515:27	–	circl
CNNVD	Linux kernel 安全漏洞	17 Sep 202500:00	–	cnnvd
CVE	CVE-2023-53360	17 Sep 202514:56	–	cve
Debian CVE	CVE-2023-53360	17 Sep 202514:56	–	debiancve
EUVD	EUVD-2023-59966	3 Oct 202520:07	–	euvd
NVD	CVE-2023-53360	17 Sep 202515:15	–	nvd
OpenVAS	openSUSE Security Advisory (SUSE-SU-2025:03600-1)	17 Oct 202500:00	–	openvas
OpenVAS	openSUSE Security Advisory (SUSE-SU-2025:03634-1)	20 Oct 202500:00	–	openvas

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/nfs/internal.h",
      "fs/nfs/nfs42.h",
      "fs/nfs/nfs42xdr.c",
      "fs/nfs/nfs4proc.c",
      "fs/nfs/read.c"
    ],
    "versions": [
      {
        "version": "886959f425b6a936a30b82a297ae3aecb3b8230f",
        "lessThan": "adac9f0ddd2b291c7ce41f549fdb27a13616cff5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fbd2a05f29a95d5b42b294bf47e55a711424965b",
        "lessThan": "a2f4cb206bd94b3f4a7bb05fcdce9525283b5681",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fbd2a05f29a95d5b42b294bf47e55a711424965b",
        "lessThan": "ae5d5672f1db711e91db6f52df5cb16ecd8f5692",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fbd2a05f29a95d5b42b294bf47e55a711424965b",
        "lessThan": "303a78052091c81e9003915c521fdca1c7e117af",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/nfs/internal.h",
      "fs/nfs/nfs42.h",
      "fs/nfs/nfs42xdr.c",
      "fs/nfs/nfs4proc.c",
      "fs/nfs/read.c"
    ],
    "versions": [
      {
        "version": "6.4",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.4",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.4.16",
        "lessThanOrEqual": "6.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.5.3",
        "lessThanOrEqual": "6.5.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/303a78052091c81e9003915c521fdca1c7e117af
git	www.git.kernel.org/stable/c/ae5d5672f1db711e91db6f52df5cb16ecd8f5692
git	www.git.kernel.org/stable/c/adac9f0ddd2b291c7ce41f549fdb27a13616cff5
git	www.git.kernel.org/stable/c/a2f4cb206bd94b3f4a7bb05fcdce9525283b5681

11 May 2026 19:43Current

EPSS0.00176