PT-2025-54098 · Linux+2 · Linux Kernel+2
Publicado
2023-05-14
·
Atualizado
2026-02-24
·
CVE-2023-54269
CVSS v2.0
5.4
Média
| Vetor | AV:N/AC:H/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s SUNRPC implementation that could lead to a double-free condition of the
xprt ctxt pointer while it is still in use. This occurs when an RPC request is deferred multiple times, potentially leading to a system crash. Specifically, when a request is deferred, the rq xprt ctxt pointer is moved, but not always cleared, resulting in a use-after-free scenario if the request is deferred again. The xpo release xprt function may then free the context prematurely, leading to issues when the deferred request is revisited.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Double Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Linux Kernel
Red Hat