CVE-2023-53116
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-53116
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53116.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-53116
- Downstream
- Related
- Published
- 2025-05-02T15:55:54.858Z
- Modified
- 2025-11-28T02:35:20.619215Z
- Summary
- nvmet: avoid potential UAF in nvmet_req_complete()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
nvmet: avoid potential UAF in nvmetreqcomplete()
An nvme target ->queueresponse() operation implementation may free the request passed as argument. Such implementation potentially could result in a use after free of the request pointer when percpurefput() is called in nvmetreq_complete().
Avoid such problem by using a local variable to save the sq pointer before calling _nvmetreq_complete(), thus avoiding dereferencing the req pointer after that function call.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53116.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/04c394208831d5e0d5cfee46722eb0f033cd4083
- https://git.kernel.org/stable/c/6173a77b7e9d3e202bdb9897b23f2a8afe7bf286
- https://git.kernel.org/stable/c/8ed9813871038b25a934b21ab76b5b7dbf44fc3a
- https://git.kernel.org/stable/c/a6317235da8aa7cb97529ebc8121cc2a4c4c437a
- https://git.kernel.org/stable/c/bcd535f07c58342302a2cd2bdd8894fe0872c8a9
- https://git.kernel.org/stable/c/e5d99b29012bbf0e86929403209723b2806500c1
- https://git.kernel.org/stable/c/f1d5888a5efe345b63c430b256e95acb0a475642
- https://git.kernel.org/stable/c/fafcb4b26393870c45462f9af6a48e581dbbcf7e
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53116.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-53116
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda07b4970f464f13640e28e16dad6cfa33647cc99Fixede5d99b29012bbf0e86929403209723b2806500c1Fixedfafcb4b26393870c45462f9af6a48e581dbbcf7eFixed04c394208831d5e0d5cfee46722eb0f033cd4083Fixeda6317235da8aa7cb97529ebc8121cc2a4c4c437aFixedf1d5888a5efe345b63c430b256e95acb0a475642Fixedbcd535f07c58342302a2cd2bdd8894fe0872c8a9Fixed8ed9813871038b25a934b21ab76b5b7dbf44fc3aFixed6173a77b7e9d3e202bdb9897b23f2a8afe7bf286
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.8.0Fixed4.14.311
- Type
- ECOSYSTEM
- Events
-
Introduced4.15.0Fixed4.19.279
- Type
- ECOSYSTEM
- Events
-
Introduced4.20.0Fixed5.4.238
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.176
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.104
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.21
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.2.8