CVE-2023-53055
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
fscrypt: destroy keyring after security_sb_delete()
In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete() fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landlock LSM don't get evicted until security_sb_delete(), this means that fscrypt_destroy_keyring() must be called *after* security_sb_delete(). This fixes a WARN_ON followed by a NULL dereference, only possible if Landlock was being used on encrypted files.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| e6f4fd85ef1ee6ab356bfbd64df28c1cb73aee7e | affected | git | 992a3f3e8a0c92151dfdf65fc85567c865fd558a | Unavailable | None listed |
| d7e7b9af104c7b389a0c21eb26532511bce4b510 | affected | git | d77531fac6a1fd9f1db0195438ba5419d72b96c4 | Unavailable | None listed |
| d7e7b9af104c7b389a0c21eb26532511bce4b510 | affected | git | 497ab5d9c7852dfedab2c9de75e41b60e54b7c5d | Unavailable | None listed |
| d7e7b9af104c7b389a0c21eb26532511bce4b510 | affected | git | ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5a | Unavailable | None listed |
| 391cceee6d435e616f68631e68f5b32d480b1e67 | affected | git | Unavailable | Unavailable | None listed |
| 68d15d6558a386f46d815a6ac39edecad713a1bf | affected | git | Unavailable | Unavailable | None listed |
| 5.15.78 | affected | semver | 5.15.105 | Unavailable | None listed |
| 5.10.154 | affected | semver | 5.11 | Unavailable | None listed |
| 6.0.8 | affected | semver | 6.1 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.1 | Unavailable | None listed |
| 5.15.105 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.22 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.2.9 | unaffected | semver | Unavailable | 6.2.* | None listed |
| 6.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |