CVE-2023-53055

fscrypt: destroy keyring after security_sb_delete()

State: Published
Severity: Not scored
Published: May 2, 2025
Updated: May 23, 2026
Reserved: May 2, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

fscrypt: destroy keyring after security_sb_delete()

fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landlock LSM don't get evicted until security_sb_delete(), this means that fscrypt_destroy_keyring() must be called *after* security_sb_delete().

This fixes a WARN_ON followed by a NULL dereference, only possible if Landlock was being used on encrypted files.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e6f4fd85ef1ee6ab356bfbd64df28c1cb73aee7e to before 992a3f3e8a0c92151dfdf65fc85567c865fd558aAffected d7e7b9af104c7b389a0c21eb26532511bce4b510 to before d77531fac6a1fd9f1db0195438ba5419d72b96c4Affected d7e7b9af104c7b389a0c21eb26532511bce4b510 to before 497ab5d9c7852dfedab2c9de75e41b60e54b7c5dAffected d7e7b9af104c7b389a0c21eb26532511bce4b510 to before ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5aAffected 391cceee6d435e616f68631e68f5b32d480b1e67Affected 68d15d6558a386f46d815a6ac39edecad713a1bfAffected 5.15.78 to before 5.15.105Affected 5.10.154 to before 5.11Affected 6.0.8 to before 6.1Affected
LinuxLinux	6.1Affected before 6.1Not affected 5.15.105 through 5.15.Not affected 6.1.22 through 6.1.Not affected 6.2.9 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

e6f4fd85ef1ee6ab356bfbd64df28c1cb73aee7e to before 992a3f3e8a0c92151dfdf65fc85567c865fd558aAffected
d7e7b9af104c7b389a0c21eb26532511bce4b510 to before d77531fac6a1fd9f1db0195438ba5419d72b96c4Affected
d7e7b9af104c7b389a0c21eb26532511bce4b510 to before 497ab5d9c7852dfedab2c9de75e41b60e54b7c5dAffected
d7e7b9af104c7b389a0c21eb26532511bce4b510 to before ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5aAffected
391cceee6d435e616f68631e68f5b32d480b1e67Affected
68d15d6558a386f46d815a6ac39edecad713a1bfAffected
5.15.78 to before 5.15.105Affected
5.10.154 to before 5.11Affected
6.0.8 to before 6.1Affected

LinuxLinux

6.1Affected
before 6.1Not affected
5.15.105 through 5.15.*Not affected
6.1.22 through 6.1.*Not affected
6.2.9 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.