CVE-2023-53116
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
nvmet: avoid potential UAF in nvmet_req_complete()
In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() operation implementation may free the request passed as argument. Such implementation potentially could result in a use after free of the request pointer when percpu_ref_put() is called in nvmet_req_complete(). Avoid such problem by using a local variable to save the sq pointer before calling __nvmet_req_complete(), thus avoiding dereferencing the req pointer after that function call.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | e5d99b29012bbf0e86929403209723b2806500c1 | Unavailable | None listed |
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | fafcb4b26393870c45462f9af6a48e581dbbcf7e | Unavailable | None listed |
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | 04c394208831d5e0d5cfee46722eb0f033cd4083 | Unavailable | None listed |
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | a6317235da8aa7cb97529ebc8121cc2a4c4c437a | Unavailable | None listed |
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | f1d5888a5efe345b63c430b256e95acb0a475642 | Unavailable | None listed |
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | bcd535f07c58342302a2cd2bdd8894fe0872c8a9 | Unavailable | None listed |
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | 8ed9813871038b25a934b21ab76b5b7dbf44fc3a | Unavailable | None listed |
| a07b4970f464f13640e28e16dad6cfa33647cc99 | affected | git | 6173a77b7e9d3e202bdb9897b23f2a8afe7bf286 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.8 | Unavailable | None listed |
| 4.14.311 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.279 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.238 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.176 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.104 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.21 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.2.8 | unaffected | semver | Unavailable | 6.2.* | None listed |
| 6.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |