GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-54258 (GCVE-0-2023-54258)

Vulnerability from cvelistv5 – Published: 2025-12-30 12:15 – Updated: 2026-08-05 09:18
VLAI
Title
cifs: fix potential oops in cifs_oplock_break
Summary
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have closes that race with lease breaks, and so with the current checks for whether to send the lease response, oplock_response(), this can mean that an unmount (kill_sb) can occur just before we were checking if the tcon->ses is valid. See below: [Fri Aug 4 04:12:50 2023] RIP: 0010:cifs_oplock_break+0x1f7/0x5b0 [cifs] [Fri Aug 4 04:12:50 2023] Code: 7d a8 48 8b 7d c0 c0 e9 02 48 89 45 b8 41 89 cf e8 3e f5 ff ff 4c 89 f7 41 83 e7 01 e8 82 b3 03 f2 49 8b 45 50 48 85 c0 74 5e <48> 83 78 60 00 74 57 45 84 ff 75 52 48 8b 43 98 48 83 eb 68 48 39 [Fri Aug 4 04:12:50 2023] RSP: 0018:ffffb30607ddbdf8 EFLAGS: 00010206 [Fri Aug 4 04:12:50 2023] RAX: 632d223d32612022 RBX: ffff97136944b1e0 RCX: 0000000080100009 [Fri Aug 4 04:12:50 2023] RDX: 0000000000000001 RSI: 0000000080100009 RDI: ffff97136944b188 [Fri Aug 4 04:12:50 2023] RBP: ffffb30607ddbe58 R08: 0000000000000001 R09: ffffffffc08e0900 [Fri Aug 4 04:12:50 2023] R10: 0000000000000001 R11: 000000000000000f R12: ffff97136944b138 [Fri Aug 4 04:12:50 2023] R13: ffff97149147c000 R14: ffff97136944b188 R15: 0000000000000000 [Fri Aug 4 04:12:50 2023] FS: 0000000000000000(0000) GS:ffff9714f7c00000(0000) knlGS:0000000000000000 [Fri Aug 4 04:12:50 2023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [Fri Aug 4 04:12:50 2023] CR2: 00007fd8de9c7590 CR3: 000000011228e000 CR4: 0000000000350ef0 [Fri Aug 4 04:12:50 2023] Call Trace: [Fri Aug 4 04:12:50 2023] <TASK> [Fri Aug 4 04:12:50 2023] process_one_work+0x225/0x3d0 [Fri Aug 4 04:12:50 2023] worker_thread+0x4d/0x3e0 [Fri Aug 4 04:12:50 2023] ? process_one_work+0x3d0/0x3d0 [Fri Aug 4 04:12:50 2023] kthread+0x12a/0x150 [Fri Aug 4 04:12:50 2023] ? set_kthread_struct+0x50/0x50 [Fri Aug 4 04:12:50 2023] ret_from_fork+0x22/0x30 [Fri Aug 4 04:12:50 2023] </TASK> To fix this change the ordering of the checks before sending the oplock_response to first check if the openFileList is empty.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 63fb45ddc491895c4b36664e0c2c3b548545ae93 , < b99f490ea87ebcca3a429fd8837067feb56a4c7c (git)
Affected: 1bf709b9625001eefdd41048c5f4c7544ee33394 , < 5ee28bcfbaacf289eb25c662a2862542ea6ce6a7 (git)
Affected: 3b4c15171c3ce9120c81f5564b9367d8d0f4219c , < 6b67a6d2e50634fe127e656147c81915955e9f5e (git)
Affected: da787d5b74983f7525d1eb4b9c0b4aff2821511a , < e8f5f849ffce24490eb9449e98312b66c0dba76f (git)
Affected: cff7fb969edaeff2bc80c8a8f7cf7b0c8df32da7 (git)
Affected: 6.3.13 , < 6.4 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.15.121 , < 5.15.128 (semver)
Affected: 6.1.39 , < 6.1.47 (semver)
Affected: 6.4.4 , < 6.4.12 (semver)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/client/file.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b99f490ea87ebcca3a429fd8837067feb56a4c7c",
              "status": "affected",
              "version": "63fb45ddc491895c4b36664e0c2c3b548545ae93",
              "versionType": "git"
            },
            {
              "lessThan": "5ee28bcfbaacf289eb25c662a2862542ea6ce6a7",
              "status": "affected",
              "version": "1bf709b9625001eefdd41048c5f4c7544ee33394",
              "versionType": "git"
            },
            {
              "lessThan": "6b67a6d2e50634fe127e656147c81915955e9f5e",
              "status": "affected",
              "version": "3b4c15171c3ce9120c81f5564b9367d8d0f4219c",
              "versionType": "git"
            },
            {
              "lessThan": "e8f5f849ffce24490eb9449e98312b66c0dba76f",
              "status": "affected",
              "version": "da787d5b74983f7525d1eb4b9c0b4aff2821511a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "cff7fb969edaeff2bc80c8a8f7cf7b0c8df32da7",
              "versionType": "git"
            },
            {
              "lessThan": "6.4",
              "status": "affected",
              "version": "6.3.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/client/file.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5.15.128",
              "status": "affected",
              "version": "5.15.121",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.47",
              "status": "affected",
              "version": "6.1.39",
              "versionType": "semver"
            },
            {
              "lessThan": "6.4.12",
              "status": "affected",
              "version": "6.4.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.128",
                  "versionStartIncluding": "5.15.121",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.47",
                  "versionStartIncluding": "6.1.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.12",
                  "versionStartIncluding": "6.4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.3.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix potential oops in cifs_oplock_break\n\nWith deferred close we can have closes that race with lease breaks,\nand so with the current checks for whether to send the lease response,\noplock_response(), this can mean that an unmount (kill_sb) can occur\njust before we were checking if the tcon-\u003eses is valid.  See below:\n\n[Fri Aug  4 04:12:50 2023] RIP: 0010:cifs_oplock_break+0x1f7/0x5b0 [cifs]\n[Fri Aug  4 04:12:50 2023] Code: 7d a8 48 8b 7d c0 c0 e9 02 48 89 45 b8 41 89 cf e8 3e f5 ff ff 4c 89 f7 41 83 e7 01 e8 82 b3 03 f2 49 8b 45 50 48 85 c0 74 5e \u003c48\u003e 83 78 60 00 74 57 45 84 ff 75 52 48 8b 43 98 48 83 eb 68 48 39\n[Fri Aug  4 04:12:50 2023] RSP: 0018:ffffb30607ddbdf8 EFLAGS: 00010206\n[Fri Aug  4 04:12:50 2023] RAX: 632d223d32612022 RBX: ffff97136944b1e0 RCX: 0000000080100009\n[Fri Aug  4 04:12:50 2023] RDX: 0000000000000001 RSI: 0000000080100009 RDI: ffff97136944b188\n[Fri Aug  4 04:12:50 2023] RBP: ffffb30607ddbe58 R08: 0000000000000001 R09: ffffffffc08e0900\n[Fri Aug  4 04:12:50 2023] R10: 0000000000000001 R11: 000000000000000f R12: ffff97136944b138\n[Fri Aug  4 04:12:50 2023] R13: ffff97149147c000 R14: ffff97136944b188 R15: 0000000000000000\n[Fri Aug  4 04:12:50 2023] FS:  0000000000000000(0000) GS:ffff9714f7c00000(0000) knlGS:0000000000000000\n[Fri Aug  4 04:12:50 2023] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[Fri Aug  4 04:12:50 2023] CR2: 00007fd8de9c7590 CR3: 000000011228e000 CR4: 0000000000350ef0\n[Fri Aug  4 04:12:50 2023] Call Trace:\n[Fri Aug  4 04:12:50 2023]  \u003cTASK\u003e\n[Fri Aug  4 04:12:50 2023]  process_one_work+0x225/0x3d0\n[Fri Aug  4 04:12:50 2023]  worker_thread+0x4d/0x3e0\n[Fri Aug  4 04:12:50 2023]  ? process_one_work+0x3d0/0x3d0\n[Fri Aug  4 04:12:50 2023]  kthread+0x12a/0x150\n[Fri Aug  4 04:12:50 2023]  ? set_kthread_struct+0x50/0x50\n[Fri Aug  4 04:12:50 2023]  ret_from_fork+0x22/0x30\n[Fri Aug  4 04:12:50 2023]  \u003c/TASK\u003e\n\nTo fix this change the ordering of the checks before sending the oplock_response\nto first check if the openFileList is empty."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The oplock/lease break is an unsolicited SMB2 notification packet received from the remote server and processed by the cifs demultiplex thread (`is_oplock_break` \u2192 `cifs_queue_oplock_break`), so a malicious/compromised SMB server or an MITM on a non-signed connection triggers the vulnerable work item purely over the network. This matches the treatment of other cifs client bugs driven by server-supplied data, including the identical CVE-2025-38527 in this same function.\nAC:L - The remote server controls the triggering side entirely and can send lease/oplock breaks continuously, and the same break drives `cifs_close_deferred_file()` on the other side; with the last handle the `kfree(tcon)` occurs synchronously inside `_cifsFileInfo_put()` rather than through a narrow window, and unmounts occur automatically in common autofs/automount deployments.\nPR:N - The attacker is the SMB server (or an MITM) and needs no credentials or privileges on the victim client; the client\u0027s own handling of a server-sent break notification is what enters the vulnerable path.\nUI:N - Against an already-mounted share the attack needs no victim action \u2014 the server sends break notifications on its own schedule and the teardown side is reached via deferred-close plus automatic/idle unmount rather than an interactive step.\nS:U - The use-after-free is in kernel memory and its impact stays within the kernel\u0027s own security authority, with no crossing of a VM, IOMMU, or sandbox boundary.\nC:H - The freed `struct cifs_tcon` is dereferenced through a four-level pointer chain (`tcon-\u003eses-\u003eserver-\u003eops`) read from reallocated slab contents, which after heap grooming yields an arbitrary kernel read primitive; the oops itself shows the freed object already refilled with unrelated heap data.\nI:H - The stale pointer terminates in an indirect call `tcon-\u003eses-\u003eserver-\u003eops-\u003eoplock_response(tcon, ...)` where every pointer in the chain and the first argument come from freed, reallocatable memory, giving a control-flow hijack primitive and thus arbitrary kernel code execution.\nA:H - Even unexploited, the bug produces an immediate kernel oops (general protection fault from the non-canonical `ses` pointer in the reported trace), and it can be re-triggered repeatedly by the remote server."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:18:36.889Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b99f490ea87ebcca3a429fd8837067feb56a4c7c"
        },
        {
          "url": "https://git.kernel.org/stable/c/5ee28bcfbaacf289eb25c662a2862542ea6ce6a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b67a6d2e50634fe127e656147c81915955e9f5e"
        },
        {
          "url": "https://git.kernel.org/stable/c/e8f5f849ffce24490eb9449e98312b66c0dba76f"
        }
      ],
      "title": "cifs: fix potential oops in cifs_oplock_break",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-54258",
    "datePublished": "2025-12-30T12:15:52.855Z",
    "dateReserved": "2025-12-30T12:06:44.516Z",
    "dateUpdated": "2026-08-05T09:18:36.889Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-54258",
      "date": "2026-09-20",
      "epss": "0.00538",
      "percentile": "0.44201"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "fs/smb/client/file.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "b99f490ea87ebcca3a429fd8837067feb56a4c7c",
                    "status": "affected",
                    "version": "63fb45ddc491895c4b36664e0c2c3b548545ae93",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5ee28bcfbaacf289eb25c662a2862542ea6ce6a7",
                    "status": "affected",
                    "version": "1bf709b9625001eefdd41048c5f4c7544ee33394",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6b67a6d2e50634fe127e656147c81915955e9f5e",
                    "status": "affected",
                    "version": "3b4c15171c3ce9120c81f5564b9367d8d0f4219c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e8f5f849ffce24490eb9449e98312b66c0dba76f",
                    "status": "affected",
                    "version": "da787d5b74983f7525d1eb4b9c0b4aff2821511a",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "cff7fb969edaeff2bc80c8a8f7cf7b0c8df32da7",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6.4",
                    "status": "affected",
                    "version": "6.3.13",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "fs/smb/client/file.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "5.15.128",
                    "status": "affected",
                    "version": "5.15.121",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.1.47",
                    "status": "affected",
                    "version": "6.1.39",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.4.12",
                    "status": "affected",
                    "version": "6.4.4",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix potential oops in cifs_oplock_break\n\nWith deferred close we can have closes that race with lease breaks,\nand so with the current checks for whether to send the lease response,\noplock_response(), this can mean that an unmount (kill_sb) can occur\njust before we were checking if the tcon-\u003eses is valid.  See below:\n\n[Fri Aug  4 04:12:50 2023] RIP: 0010:cifs_oplock_break+0x1f7/0x5b0 [cifs]\n[Fri Aug  4 04:12:50 2023] Code: 7d a8 48 8b 7d c0 c0 e9 02 48 89 45 b8 41 89 cf e8 3e f5 ff ff 4c 89 f7 41 83 e7 01 e8 82 b3 03 f2 49 8b 45 50 48 85 c0 74 5e \u003c48\u003e 83 78 60 00 74 57 45 84 ff 75 52 48 8b 43 98 48 83 eb 68 48 39\n[Fri Aug  4 04:12:50 2023] RSP: 0018:ffffb30607ddbdf8 EFLAGS: 00010206\n[Fri Aug  4 04:12:50 2023] RAX: 632d223d32612022 RBX: ffff97136944b1e0 RCX: 0000000080100009\n[Fri Aug  4 04:12:50 2023] RDX: 0000000000000001 RSI: 0000000080100009 RDI: ffff97136944b188\n[Fri Aug  4 04:12:50 2023] RBP: ffffb30607ddbe58 R08: 0000000000000001 R09: ffffffffc08e0900\n[Fri Aug  4 04:12:50 2023] R10: 0000000000000001 R11: 000000000000000f R12: ffff97136944b138\n[Fri Aug  4 04:12:50 2023] R13: ffff97149147c000 R14: ffff97136944b188 R15: 0000000000000000\n[Fri Aug  4 04:12:50 2023] FS:  0000000000000000(0000) GS:ffff9714f7c00000(0000) knlGS:0000000000000000\n[Fri Aug  4 04:12:50 2023] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[Fri Aug  4 04:12:50 2023] CR2: 00007fd8de9c7590 CR3: 000000011228e000 CR4: 0000000000350ef0\n[Fri Aug  4 04:12:50 2023] Call Trace:\n[Fri Aug  4 04:12:50 2023]  \u003cTASK\u003e\n[Fri Aug  4 04:12:50 2023]  process_one_work+0x225/0x3d0\n[Fri Aug  4 04:12:50 2023]  worker_thread+0x4d/0x3e0\n[Fri Aug  4 04:12:50 2023]  ? process_one_work+0x3d0/0x3d0\n[Fri Aug  4 04:12:50 2023]  kthread+0x12a/0x150\n[Fri Aug  4 04:12:50 2023]  ? set_kthread_struct+0x50/0x50\n[Fri Aug  4 04:12:50 2023]  ret_from_fork+0x22/0x30\n[Fri Aug  4 04:12:50 2023]  \u003c/TASK\u003e\n\nTo fix this change the ordering of the checks before sending the oplock_response\nto first check if the openFileList is empty."
          },
          {
            "lang": "es",
            "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncifs: corrige un posible oops en cifs_oplock_break\n\nCon el cierre diferido podemos tener cierres que compiten con las interrupciones de arrendamiento, y as\u00ed, con las comprobaciones actuales para determinar si enviar la respuesta de arrendamiento, oplock_response(), esto puede significar que un desmontaje (kill_sb) puede ocurrir justo antes de que estuvi\u00e9ramos comprobando si tcon-\u0026gt;ses es v\u00e1lido. V\u00e9ase a continuaci\u00f3n:\n\n[Fri Aug  4 04:12:50 2023] RIP: 0010:cifs_oplock_break+0x1f7/0x5b0 [cifs]\n[Fri Aug  4 04:12:50 2023] Code: 7d a8 48 8b 7d c0 c0 e9 02 48 89 45 b8 41 89 cf e8 3e f5 ff ff 4c 89 f7 41 83 e7 01 e8 82 b3 03 f2 49 8b 45 50 48 85 c0 74 5e \u0026lt;48\u0026gt; 83 78 60 00 74 57 45 84 ff 75 52 48 8b 43 98 48 83 eb 68 48 39\n[Fri Aug  4 04:12:50 2023] RSP: 0018:ffffb30607ddbdf8 EFLAGS: 00010206\n[Fri Aug  4 04:12:50 2023] RAX: 632d223d32612022 RBX: ffff97136944b1e0 RCX: 0000000080100009\n[Fri Aug  4 04:12:50 2023] RDX: 0000000000000001 RSI: 0000000080100009 RDI: ffff97136944b188\n[Fri Aug  4 04:12:50 2023] RBP: ffffb30607ddbe58 R08: 0000000000000001 R09: ffffffffc08e0900\n[Fri Aug  4 04:12:50 2023] R10: 0000000000000001 R11: 000000000000000f R12: ffff97136944b138\n[Fri Aug  4 04:12:50 2023] R13: ffff97149147c000 R14: ffff97136944b188 R15: 0000000000000000\n[Fri Aug  4 04:12:50 2023] FS:  0000000000000000(0000) GS:ffff9714f7c00000(0000) knlGS:0000000000000000\n[Fri Aug  4 04:12:50 2023] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[Fri Aug  4 04:12:50 2023] CR2: 00007fd8de9c7590 CR3: 000000011228e000 CR4: 0000000000350ef0\n[Fri Aug  4 04:12:50 2023] Call Trace:\n[Fri Aug  4 04:12:50 2023]  \n[Fri Aug  4 04:12:50 2023]  process_one_work+0x225/0x3d0\n[Fri Aug  4 04:12:50 2023]  worker_thread+0x4d/0x3e0\n[Fri Aug  4 04:12:50 2023]  ? process_one_work+0x3d0/0x3d0\n[Fri Aug  4 04:12:50 2023]  kthread+0x12a/0x150\n[Fri Aug  4 04:12:50 2023]  ? set_kthread_struct+0x50/0x50\n[Fri Aug  4 04:12:50 2023]  ret_from_fork+0x22/0x30\n[Fri Aug  4 04:12:50 2023]  \n\nPara solucionar esto, cambie el orden de las comprobaciones antes de enviar la oplock_response para comprobar primero si la openFileList est\u00e1 vac\u00eda."
          }
        ],
        "id": "CVE-2023-54258",
        "lastModified": "2026-08-04T11:16:38.623",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2025-12-30T13:16:14.560",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/5ee28bcfbaacf289eb25c662a2862542ea6ce6a7"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/6b67a6d2e50634fe127e656147c81915955e9f5e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b99f490ea87ebcca3a429fd8837067feb56a4c7c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e8f5f849ffce24490eb9449e98312b66c0dba76f"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Deferred"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:12:29+00:00",
      "cve": "CVE-2023-54258",
      "id": "CVE-2023-54258",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "156",
      "product_status:known_not_affected": "118",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Kernel: Denial of Service in CIFS client due to race condition",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54258.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.