CVE-2023-54269

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s SUNRPC implementation that could lead to a double-free condition of the xprt ctxt pointer while it is still in use. This occurs when an RPC request is deferred multiple times, potentially leading to a system crash. Specifically, when a request is deferred, the rq xprt ctxt pointer is moved, but not always cleared, resulting in a use-after-free scenario if the request is deferred again. The xpo release xprt function may then free the context prematurely, leading to issues when the deferred request is revisited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.