SECUFOCUSNOW
Home›CVE index›CVE-2023-54258
Review reviewCritical

CVE-2023-54258

Linux

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have closes that race with lease breaks, and so with the current checks for whether to send the lease response, oplock_response(), this can mean that an unmount (kill_sb) can occur just before we were checking if the tcon->ses is valid. See below: [Fri Aug 4 04:12:50 2023] RIP: 0010:cifs_oplock_break+0x1f7/0x5b0 [cifs] [Fri Aug 4 04:12:50 2023] Code: 7d a8 48 8b 7d c0 c0 e9 02 48 89 45 b8 41 89 cf e8 3e f5 ff ff 4c 89 f7 41 83 e7 01 e8 82 b3 03 f2 49 8...

CVSS
9.8
EPSS
0.48%
38.9% percentile
CISA KEV
Not listed
Published
2025.12.30
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.48%
Technical severityCVSS 9.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have closes that race with lease breaks, and so with the current checks for whether to send the lease response, oplock_response(), this can mean that an unmount (kill_sb) can occur just before we were checking if the tcon->ses is valid. See below: [Fri Aug 4 04:12:50 2023] RIP: 0010:cifs_oplock_break+0x1f7/0x5b0 [cifs] [Fri Aug 4 04:12:50 2023] Code: 7d a8 48 8b 7d c0 c0 e9 02 48 89 45 b8 41 89 cf e8 3e f5 ff ff 4c 89 f7 41 83 e7 01 e8 82 b3 03 f2 49 8...

Affected product and versions

Product
Linux
Affected versions
>= 63fb45ddc491895c4b36664e0c2c3b548545ae93 < b99f490ea87ebcca3a429fd8837067feb56a4c7c, >= 1bf709b9625001eefdd41048c5f4c7544ee33394 < 5ee28bcfbaacf289eb25c662a2862542ea6ce6a7, >= 3b4c15171c3ce9120c81f5564b9367d8d0f4219c < 6b67a6d2e50634fe127e656147c81915955e9f5e, >= da787d5b74983f7525d1eb4b9c0b4aff2821511a < e8f5f849ffce24490eb9449e98312b66c0dba76f, >= cff7fb969edaeff2bc80c8a8f7cf7b0c8df32da7, >= 6.3.13 < 6.4, >= 5.15.121 < 5.15.128, >= 6.1.39 < 6.1.47, >= 6.4.4 < 6.4.12
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available