CVE-2023-53360

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to NFSv4.2 scratch handling for READ PLUS operations. The read code may send multiple requests using the same nfs pgio header, while nfs4 proc read setup() is only called once. This can lead to a double-free of the scratch buffer and setting a NULL pointer with a non-zero length to the xdr scratch buffer, resulting in an oops during decoding when handling READ PLUS hole segments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.