CVE-2023-53083

CVE-2023-53083 affects the Linux kernel NFSD splice path. If a splice read returns a partial page at end and the next splice completes it, the same page could be re-added, corrupting the reply by overwriting rq_respages/rq_next_page. The issue stems from nfsd_splice_actor previously handling cont...

CVE-2023-53083: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't replace page in rqpages if it's a continuation of last page The splice read calls nfsdspliceactor to put the pages containing file data into the svcrqst-rqpages array. It's possible however to get a splice result that...