CVE-2023-53131
published 2025-05-02CVE-2023-53131: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
7.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix a server shutdown leak
Fix a race where kthread_stop() may prevent the threadfn from ever getting
called. If that happens the svc_rqst will not be cleaned up.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.9.52 < 4.10 | 4.10 |
| linux | linux | >= ed6473ddc704a2005b9900ca08e236ebb2d8540a < ce7dd61e004002bc1c48d1ca47c887f3f3cc7370 | ce7dd61e004002bc1c48d1ca47c887f3f3cc7370 |
| linux | linux | >= ed6473ddc704a2005b9900ca08e236ebb2d8540a < ad7e40ee157ba33950a4ccdc284334580da3638d | ad7e40ee157ba33950a4ccdc284334580da3638d |
| linux | linux | >= ed6473ddc704a2005b9900ca08e236ebb2d8540a < 7a3720361068ab520aed4608bad31ea9a6cc7fe7 | 7a3720361068ab520aed4608bad31ea9a6cc7fe7 |
| linux | linux | >= ed6473ddc704a2005b9900ca08e236ebb2d8540a < f74b3286859463cd63cc9d4aeaabd8b0c640182a | f74b3286859463cd63cc9d4aeaabd8b0c640182a |
| linux | linux | >= ed6473ddc704a2005b9900ca08e236ebb2d8540a < 9ca6705d9d609441d34f8b853e1e4a6369b3b171 | 9ca6705d9d609441d34f8b853e1e4a6369b3b171 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 4.4.0-272.306 | 4.4.0-272.306 |
| linux | linux_kernel | >= 0 < 4.15.0-241.253 | 4.15.0-241.253 |
| linux | linux_kernel | >= 4.12 < 5.10.175 | 5.10.175 |
| linux | linux_kernel | >= 4.9.52 < 4.10 | 4.10 |
| linux | linux_kernel | >= 5.11 < 5.15.103 | 5.15.103 |
| linux | linux_kernel | >= 5.16 < 6.1.20 | 6.1.20 |
| linux | linux_kernel | >= 6.2 < 6.2.7 | 6.2.7 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: SUNRPC: Fix a server shutdown leak
vendor_redhat·2025-05-02·CVSS 5.5
CVE-2023-53131 [MEDIUM] kernel: SUNRPC: Fix a server shutdown leak
kernel: SUNRPC: Fix a server shutdown leak
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix a server shutdown leak
Fix a race where kthread_stop() may prevent the threadfn from ever getting
called. If that happens the svc_rqst will not be cleaned up.
Statement: A race condition in the SUNRPC server shutdown logic could lead to a memory/resource leak of the svc_rqst structure. The issue occurs if kthread_stop() is called before the associated kernel thread (threadfn) is actually scheduled to run. In this case, the thread's cleanup routine (svc_exit_thread()) is never called, resulting in leaked memory or unreleased resources. The patch addresses this by manually invoking cleanup if kthread_stop() returns -EINTR.
Package: kernel (Red Hat Enterprise Linux 10)
Debian
CVE-2023-53131: linux - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix...
vendor_debian·2023·CVSS 5.5
CVE-2023-53131 [MEDIUM] CVE-2023-53131: linux - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix...
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
OSV
linux-aws-fips vulnerabilities
osv·2025-09-24·CVSS 5.5
CVE-2025-38350 linux-aws-fips vulnerabilities
linux-aws-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- SPI subsystem;
- USB core drivers;
- NILFS2 file system;
- IPv6 networking;
- Network traffic control;
(CVE-2025-38350, CVE-2024-47685, CVE-2024-57996, CVE-2024-53130,
CVE-2025-37752, CVE-2023-52477, CVE-2024-53131, CVE-2024-50202,
CVE-2024-27074, CVE-2024-50051)
OSV
linux-fips, linux-azure-fips, linux-gcp-fips vulnerabilities
osv·2025-09-17·CVSS 5.5
CVE-2024-53130 linux-fips, linux-azure-fips, linux-gcp-fips vulnerabilities
linux-fips, linux-azure-fips, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- SPI subsystem;
- USB core drivers;
- NILFS2 file system;
- IPv6 networking;
- Network traffic control;
(CVE-2024-53130, CVE-2025-38350, CVE-2024-50202, CVE-2024-47685,
CVE-2025-37752, CVE-2024-50051, CVE-2024-57996, CVE-2023-52477,
CVE-2024-27074, CVE-2024-53131)
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
osv·2025-09-17·CVSS 5.5
CVE-2024-53130 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- SPI subsystem;
- USB core drivers;
- NILFS2 file system;
- IPv6 networking;
- Network traffic control;
(CVE-2024-53130, CVE-2025-38350, CVE-2024-50202, CVE-2024-47685,
CVE-2025-37752, CVE-2024-50051, CVE-2024-57996, CVE-2023-52477,
CVE-2024-27074, CVE-2024-53131)
OSV
linux-aws vulnerabilities
osv·2025-09-02·CVSS 5.5
CVE-2024-50051 linux-aws vulnerabilities
linux-aws vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- Media drivers;
- SPI subsystem;
- USB core drivers;
- NILFS2 file system;
- IPv6 networking;
- Network traffic control;
(CVE-2024-50051, CVE-2025-37752, CVE-2024-53130, CVE-2024-47685,
CVE-2024-27074, CVE-2023-52477, CVE-2024-50202, CVE-2021-47345,
CVE-2024-57996, CVE-2024-53131)
OSV
linux-fips vulnerabilities
osv·2025-08-28·CVSS 5.5
CVE-2024-50051 linux-fips vulnerabilities
linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- Media drivers;
- SPI subsystem;
- USB core drivers;
- NILFS2 file system;
- IPv6 networking;
- Network traffic control;
(CVE-2024-50051, CVE-2025-37752, CVE-2024-53130, CVE-2024-47685,
CVE-2024-27074, CVE-2023-52477, CVE-2024-50202, CVE-2021-47345,
CVE-2024-57996, CVE-2024-53131)
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2025-08-28·CVSS 5.5
CVE-2024-50051 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- Media drivers;
- SPI subsystem;
- USB core drivers;
- NILFS2 file system;
- IPv6 networking;
- Network traffic control;
(CVE-2024-50051, CVE-2025-37752, CVE-2024-53130, CVE-2024-47685,
CVE-2024-27074, CVE-2023-52477, CVE-2024-50202, CVE-2021-47345,
CVE-2024-57996, CVE-2024-53131)
OSV
CVE-2023-53131: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the
osv·2025-05-02·CVSS 5.5
CVE-2023-53131 [MEDIUM] CVE-2023-53131: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.
GHSA
GHSA-jjmx-g5x5-q3h7: In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix a server shutdown leak
Fix a race where kthread_stop() may prevent t
ghsa_unreviewed·2025-05-02
CVE-2023-53131 [MEDIUM] CWE-401 GHSA-jjmx-g5x5-q3h7: In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix a server shutdown leak
Fix a race where kthread_stop() may prevent t
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix a server shutdown leak
Fix a race where kthread_stop() may prevent the threadfn from ever getting
called. If that happens the svc_rqst will not be cleaned up.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638dhttps://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a
2025-05-02
Published