CVE Database
/

CVE-2023-53111

Back to search

CVE-2023-53111

Published: May 2, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_filebacked() calls blk_mq_complete_request() synchronously or asynchronously when using asynchronous I/O unless memory allocation fails. Hence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor 'rq' after do_req_filebacked() finished unless we are sure that the request has not yet been completed. This patch fixes the following kernel crash: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000054 Call trace: css_put.42938+0x1c/0x1ac loop_process_work+0xc8c/0xfd4 loop_rootcg_workfn+0x24/0x34 process_one_work+0x244/0x558 worker_thread+0x400/0x8fc kthread+0x16c/0x1e0 ret_from_fork+0x10/0x20

VendorProductVersions

Linux

Linux

affected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 - < 407badf73ec9fb0d5744bf2ca1745c1818aa222f
affected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 - < e3fda704903f6d1fc351412f1bc6620333959ada
affected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 - < 6917395c4667cfb607ed8bf1826205a59414657c
affected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 - < 9b0cb770f5d7b1ff40bea7ca385438ee94570eec

Linux

Linux

affected
4.4
unaffected
0 - < 4.4
unaffected
5.15.104 - <= 5.15.*
unaffected
6.1.21 - <= 6.1.*
unaffected
6.2.8 - <= 6.2.*

+1 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now