CVE-2023-54258 — NULL Pointer Dereference in Linux
Severity
5.8MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential oops in cifs_oplock_break
With deferred close we can have closes that race with lease breaks,
and so with the current checks for whether to send the lease response,
oplock_response(), this can mean that an unmount (kill_sb) can occur
just before we were checking if the tcon->ses is valid. See below:
[Fri Aug 4 04:12:50 2023] RIP: 0010:cifs_oplock_break+0x1f7/0x5b0 [cifs]
[Fri Aug 4 04:12:50 2023] Code: 7d …
Affected Packages4 packages
▶CVEListV5linux/linux63fb45ddc491895c4b36664e0c2c3b548545ae93 — b99f490ea87ebcca3a429fd8837067feb56a4c7c+7
🔴Vulnerability Details
3GHSA▶
GHSA-jxrr-h72w-8m3v: In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential oops in cifs_oplock_break
With deferred close we can have cl↗2025-12-30
OSV▶
CVE-2023-54258: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have clos↗2025-12-30