CVE-2023-54276 — Improper Initialization in Linux
Severity
5.8MEDIUM
No vectorEPSS
0.0%
top 92.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
Commit f5f9d4a314da ("nfsd: move reply cache initialization into nfsd
startup") moved the initialization of the reply cache into nfsd startup,
but didn't account for the stats counters, which can be accessed before
nfsd is ever started. The result can be a NULL pointer dereference when
someone accesses /proc/fs/nfsd/reply_cache_stats while nfsd is still…
Affected Packages4 packages
▶CVEListV5linux/linux4e18b58b106e34ac69d3052dd91f520bd83cf2fc — 3025d489f9c8984d1bf5916c4a20097ed80fca5c+5
🔴Vulnerability Details
3GHSA▶
GHSA-4hqq-5h4g-jhph: In the Linux kernel, the following vulnerability has been resolved:
nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
Commi↗2025-12-30
OSV▶
CVE-2023-54276: In the Linux kernel, the following vulnerability has been resolved: nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net Commit↗2025-12-30