github - ghsa-jjmx-g5x5-q3h7

ghsa-jjmx-g5x5-q3h7

Vulnerability from github

Published

2025-05-02 18:31

Modified

2025-05-02 18:31

Details

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a server shutdown leak

Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-53131"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-02T16:15:32Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Fix a server shutdown leak\n\nFix a race where kthread_stop() may prevent the threadfn from ever getting\ncalled.  If that happens the svc_rqst will not be cleaned up.",
  "id": "GHSA-jjmx-g5x5-q3h7",
  "modified": "2025-05-02T18:31:37Z",
  "published": "2025-05-02T18:31:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53131"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2023-53131 (GCVE-0-2023-53131)

Vulnerability from cvelistv5

Published

2025-05-02 15:56

Modified

2025-05-04 12:50

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.

References

►

URL

Tags

	https://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370
	https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638d
	https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7
	https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a
	https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171

Impacted products

Vendor

Product

Version

►

Version: ed6473ddc704a2005b9900ca08e236ebb2d8540a
Version: ed6473ddc704a2005b9900ca08e236ebb2d8540a
Version: ed6473ddc704a2005b9900ca08e236ebb2d8540a
Version: ed6473ddc704a2005b9900ca08e236ebb2d8540a
Version: ed6473ddc704a2005b9900ca08e236ebb2d8540a
Version: f609266b12d214437cf9d68245dc27f8d4f69836

Version: 4.12

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/svc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ce7dd61e004002bc1c48d1ca47c887f3f3cc7370",
              "status": "affected",
              "version": "ed6473ddc704a2005b9900ca08e236ebb2d8540a",
              "versionType": "git"
            },
            {
              "lessThan": "ad7e40ee157ba33950a4ccdc284334580da3638d",
              "status": "affected",
              "version": "ed6473ddc704a2005b9900ca08e236ebb2d8540a",
              "versionType": "git"
            },
            {
              "lessThan": "7a3720361068ab520aed4608bad31ea9a6cc7fe7",
              "status": "affected",
              "version": "ed6473ddc704a2005b9900ca08e236ebb2d8540a",
              "versionType": "git"
            },
            {
              "lessThan": "f74b3286859463cd63cc9d4aeaabd8b0c640182a",
              "status": "affected",
              "version": "ed6473ddc704a2005b9900ca08e236ebb2d8540a",
              "versionType": "git"
            },
            {
              "lessThan": "9ca6705d9d609441d34f8b853e1e4a6369b3b171",
              "status": "affected",
              "version": "ed6473ddc704a2005b9900ca08e236ebb2d8540a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f609266b12d214437cf9d68245dc27f8d4f69836",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/svc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.12"
            },
            {
              "lessThan": "4.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.175",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.103",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.20",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.7",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.52",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Fix a server shutdown leak\n\nFix a race where kthread_stop() may prevent the threadfn from ever getting\ncalled.  If that happens the svc_rqst will not be cleaned up."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T12:50:30.338Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370"
        },
        {
          "url": "https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638d"
        },
        {
          "url": "https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7"
        },
        {
          "url": "https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a"
        },
        {
          "url": "https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171"
        }
      ],
      "title": "SUNRPC: Fix a server shutdown leak",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53131",
    "datePublished": "2025-05-02T15:56:05.646Z",
    "dateReserved": "2025-05-02T15:51:43.560Z",
    "dateUpdated": "2025-05-04T12:50:30.338Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.