Riskcovery

CVE-2023-52837

nbd: fix uaf in nbd_open

State
Published
Severity
7.8 High
Published
May 21, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nbd: fix uaf in nbd_open

Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and blk_cleanup_disk") cleans up disk by blk_cleanup_disk() and it won't set disk->private_data as NULL as before. UAF may be triggered in nbd_open() if someone tries to open nbd device right after nbd_put() since nbd has been free in nbd_dev_remove().

Fix this by implementing ->free_disk and free private data in it.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4af5f2e0301311f88c420fcfc5f3c8611ade20ac to before 4e9b3ec84dc97909876641dad14e0a2300d6c2a3Affected
  • 4af5f2e0301311f88c420fcfc5f3c8611ade20ac to before 879947f4180bc6e83af64eb0515e0cf57fce15dbAffected
  • 4af5f2e0301311f88c420fcfc5f3c8611ade20ac to before 56bd7901b5e9dbc9112036ea615ebcba1565fafeAffected
  • 4af5f2e0301311f88c420fcfc5f3c8611ade20ac to before 327462725b0f759f093788dfbcb2f1fd132f956bAffected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 6.1.63 through 6.1.*Not affected
  • 6.5.12 through 6.5.*Not affected
  • 6.6.2 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.