CVE-2023-52681

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-52681
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52681.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52681
Downstream
Related
Published
2024-05-17T14:24:44Z
Modified
2025-10-14T07:00:39.370520Z
Summary
efivarfs: Free s_fs_info on unmount
Details

In the Linux kernel, the following vulnerability has been resolved:

efivarfs: Free sfsinfo on unmount

Now that we allocate a sfsinfo struct on fs context creation, we should ensure that we free it again when the superblock goes away.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5329aa5101f73c451bcd48deaf3f296685849d9c
Fixed
92be3095c6ca1cdc46237839c6087555be9160e3
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5329aa5101f73c451bcd48deaf3f296685849d9c
Fixed
547713d502f7b4b8efccd409cff84d731a23853b

Affected versions

v6.*

v6.6
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1

Database specific 

{
    "vanir_signatures": [
        {
            "target": {
                "file": "fs/efivarfs/super.c",
                "function": "efivarfs_kill_sb"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547713d502f7b4b8efccd409cff84d731a23853b",
            "digest": {
                "function_hash": "267084045592183511519210700620400056966",
                "length": 121.0
            },
            "id": "CVE-2023-52681-37f85282",
            "deprecated": false,
            "signature_type": "Function"
        },
        {
            "target": {
                "file": "fs/efivarfs/super.c"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92be3095c6ca1cdc46237839c6087555be9160e3",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "258261871011090699611648689845830848502",
                    "336602140853036890750902951167930119544",
                    "39477469272267275821901926361334735195",
                    "301155185274681092546391995957922997518",
                    "308282205858770763794563463886862338476",
                    "36265723583283037318383826353504456768",
                    "2766405864761943109060790379659445710",
                    "73406963303830415975076882818143278959"
                ]
            },
            "id": "CVE-2023-52681-4d5fd349",
            "deprecated": false,
            "signature_type": "Line"
        },
        {
            "target": {
                "file": "fs/efivarfs/super.c",
                "function": "efivarfs_kill_sb"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92be3095c6ca1cdc46237839c6087555be9160e3",
            "digest": {
                "function_hash": "140945893945178147675524937978392295726",
                "length": 152.0
            },
            "id": "CVE-2023-52681-5968631b",
            "deprecated": false,
            "signature_type": "Function"
        },
        {
            "target": {
                "file": "fs/efivarfs/super.c"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547713d502f7b4b8efccd409cff84d731a23853b",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "258261871011090699611648689845830848502",
                    "336602140853036890750902951167930119544",
                    "90798354255910746063527908249210384211",
                    "334671563851301474235592103616280323439",
                    "199650059543827935670554764703353614612",
                    "73406963303830415975076882818143278959"
                ]
            },
            "id": "CVE-2023-52681-7aa3efa6",
            "deprecated": false,
            "signature_type": "Line"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.2