PT-2025-38360 · Linux+3 · Linux Kernel+3

Published 2023-01-23 · Updated 2025-10-23 · CVE-2023-53381

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak exists in the nfsd4 ssc umount item component within the kernel's NFS daemon (NFSD). Specifically, the reference count is not decremented under error conditions, preventing the unmounting of the source file's virtual file system mount (vfsmount) within the laundromat. This issue is addressed by decrementing the reference count of nfsd4 ssc umount item on error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-703

CWE-911

Related Identifiers

ALSA-2025_16880

BDU:2026-03361

CVE-2023-53381

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 865

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53381.json · Exploit
• https://git.kernel.org/stable/c/34e8f9ec4c9ac235f917747b23a200a5e0ec857b · Patch
• https://bdu.fstec.ru/vul/2026-03361 · Security Note
• https://git.kernel.org/stable/c/2da50149981d05955e51c28e982e9ac29bd73417 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53381 · Security Note
• https://git.kernel.org/stable/c/6c3c05402547aaca3edb23327b50f01a881831b9 · Patch
• https://osv.dev/vulnerability/CVE-2023-53381 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53381 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53381 · Vendor Advisory
• https://git.kernel.org/stable/c/9f0df37520a27ad99eaacf38418b3d2bb5023105 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53381 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53381 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53381 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory