cbcvebase.
CVE-2023-53381
published 2025-09-18

CVE-2023-53381: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix leaked reference count of nfsd4_ssc_umount_item The reference count of…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.7th percentile
In the Linux kernel, the following vulnerability has been resolved: NFSD: fix leaked reference count of nfsd4_ssc_umount_item The reference count of nfsd4_ssc_umount_item is not decremented on error conditions. This prevents the laundromat from unmounting the vfsmount of the source file. This patch decrements the reference count of nfsd4_ssc_umount_item on error.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.20-1 (bookworm)linux 6.1.20-1 (bookworm)
linuxlinux
linuxlinux>= a4bc287943f5695209ff36bdc89f17b48d68fae7 < 2da50149981d05955e51c28e982e9ac29bd734172da50149981d05955e51c28e982e9ac29bd73417
linuxlinux>= f4e44b393389c77958f7c58bf4415032b4cda15b < 80a15dc4a0214b55ca42675bb0bb2a8d857eb1d080a15dc4a0214b55ca42675bb0bb2a8d857eb1d0
linuxlinux>= f4e44b393389c77958f7c58bf4415032b4cda15b < 9f0df37520a27ad99eaacf38418b3d2bb50231059f0df37520a27ad99eaacf38418b3d2bb5023105
linuxlinux>= f4e44b393389c77958f7c58bf4415032b4cda15b < 6c3c05402547aaca3edb23327b50f01a881831b96c3c05402547aaca3edb23327b50f01a881831b9
linuxlinux>= f4e44b393389c77958f7c58bf4415032b4cda15b < 34e8f9ec4c9ac235f917747b23a200a5e0ec857b34e8f9ec4c9ac235f917747b23a200a5e0ec857b
linuxlinux_kernel>= 0 < 5.10.221-15.10.221-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 5.14 < 5.15.1545.15.154
linuxlinux_kernel>= 5.16 < 6.1.166.1.16
linuxlinux_kernel>= 6.2 < 6.2.36.2.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.