CVE-2023-53111

loop: Fix use-after-free issues

State: Published
Severity: 7.8 High
Published: May 2, 2025
Updated: Oct 30, 2026
Reserved: May 2, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

loop: Fix use-after-free issues

do_req_filebacked() calls blk_mq_complete_request() synchronously or asynchronously when using asynchronous I/O unless memory allocation fails. Hence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor 'rq' after do_req_filebacked() finished unless we are sure that the request has not yet been completed. This patch fixes the following kernel crash:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000054 Call trace: css_put.42938+0x1c/0x1ac loop_process_work+0xc8c/0xfd4 loop_rootcg_workfn+0x24/0x34 process_one_work+0x244/0x558 worker_thread+0x400/0x8fc kthread+0x16c/0x1e0 ret_from_fork+0x10/0x20

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 81bf9d78fa246a166619196ff5005430ed2bc7c2Affected bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 407badf73ec9fb0d5744bf2ca1745c1818aa222fAffected bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before e3fda704903f6d1fc351412f1bc6620333959adaAffected bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 6917395c4667cfb607ed8bf1826205a59414657cAffected bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 9b0cb770f5d7b1ff40bea7ca385438ee94570eecAffected
LinuxLinux	4.4Affected before 4.4Not affected 5.10.273 through 5.10.Not affected 5.15.104 through 5.15.Not affected 6.1.21 through 6.1.Not affected 6.2.8 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 81bf9d78fa246a166619196ff5005430ed2bc7c2Affected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 407badf73ec9fb0d5744bf2ca1745c1818aa222fAffected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before e3fda704903f6d1fc351412f1bc6620333959adaAffected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 6917395c4667cfb607ed8bf1826205a59414657cAffected
bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6 to before 9b0cb770f5d7b1ff40bea7ca385438ee94570eecAffected

LinuxLinux

4.4Affected
before 4.4Not affected
5.10.273 through 5.10.*Not affected
5.15.104 through 5.15.*Not affected
6.1.21 through 6.1.*Not affected
6.2.8 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.