CVE-2023-53867
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trimming caps When trimming the caps and just after the 'session->s_cap_lock' is released in ceph_iterate_session_caps() the cap maybe removed by another thread, and when using the stale cap memory in the callbacks it will trigger use-after-free crash. We need to check the existence of the cap just after the 'ci->i_ceph_lock' being acquired. And do nothing if it's already removed.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux2b2515b8095cf2149bef44383a99d5b5677f1831, 448875a73e16ba7d81dec9274ce9d33a12d092fb, ae6e935618d99cdba11eab4714092e7e5f13cf7e, aaf67de78807c59c35bafb5003d4fb457c764800 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 2f2dc053404febedc9c273452d9d518fb31fde72 ≤ v < 2b2515b8095cf2149bef44383a99d5b5677f1831, 2f2dc053404febedc9c273452d9d518fb31fde72 ≤ v < 448875a73e16ba7d81dec9274ce9d33a12d092fb, 2f2dc053404febedc9c273452d9d518fb31fde72 ≤ v < ae6e935618d99cdba11eab4714092e7e5f13cf7e, 2f2dc053404febedc9c273452d9d518fb31fde72 ≤ v < aaf67de78807c59c35bafb5003d4fb457c764800, 2.6.34 | 2b2515b8095cf2149bef44383a99d5b5677f1831, 448875a73e16ba7d81dec9274ce9d33a12d092fb, ae6e935618d99cdba11eab4714092e7e5f13cf7e, aaf67de78807c59c35bafb5003d4fb457c764800 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.