Review reviewHigh

CVE-2023-53990

Linux

In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close function has a critical section which modifies the deferred close file list. We must acquire deferred_lock before calling cifs_del_deferred_close function.

CVSS: 7.8
EPSS: 0.13%
CISA KEV: Not listed
Published: 2025.12.24

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.13%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 860efae127888ae535bc4eda1b7f27642727c69e < 0f87e18203bd30f71eb1a65259e28e291b6cc43a, >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde < 3aa9d065b0685b4e6052f3f2a2462966fdc44fd2, >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde < cb36365dac25d546ca4af0eb22acb43c9b4ddfdf, >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde < 32a046ccaeea6c19965c04a4c521e703f6607924, >= ca08d0eac020d48a3141dbec0a3cf64fbdb17cde < ab9ddc87a9055c4bebd6524d5d761d605d52e557, >= 60b6d38add7b9c17d6e5d49ee8e930ea1a5650c5, >= 5.15.63 < 5.15.111, >= 5.19.4 < 5.20, >= 6.0
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: Not available