PT-2025-52947 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-02-24 · CVE-2023-53990

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the SMB3 implementation related to missing locks protecting the deferred close file list. Specifically, the cifs del deferred close function, which modifies the deferred close file list, lacks proper locking mechanisms. This missing protection could lead to issues when multiple operations access and modify the list concurrently. The vulnerable function is cifs del deferred close.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53990

RHSA-2024:2394

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 975

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53990.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53990 · Security Note
• https://ubuntu.com/security/CVE-2023-53990 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53990 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53990 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53990 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53990 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53990 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53990 · Security Note
• https://suse.com/security/cve/CVE-2023-53862 · Note
• https://bugzilla.suse.com/1255970 · Note