CVE-2023-54269

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprtctxt while still in use When an RPC request is deferred, the rqxprtctxt pointer is moved out of the svcrqst into the svcdeferredreq. When the deferred request is revisited, the pointer is copied into the n...

CVE-2023-54269

The CVE-2023-54269 issue affects the Linux kernel SUNRPC code. A deferred RPC path could reuse a freed xprt context if a request is revisited after a second defer, leading to a use-after-free-like scenario and potential oops when freeing the context. The root cause is that rq_xprt_ctxt was not cl...