Riskcovery

CVE-2023-53218

rxrpc: Make it so that a waiting process can be aborted

State
Published
Severity
7.8 High
Published
Sep 15, 2025
Updated
May 11, 2026
Reserved
Sep 15, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Make it so that a waiting process can be aborted

When sendmsg() creates an rxrpc call, it queues it to wait for a connection and channel to be assigned and then waits before it can start shovelling data as the encrypted DATA packet content includes a summary of the connection parameters.

However, sendmsg() may get interrupted before a connection gets assigned and further sendmsg() calls will fail with EBUSY until an assignment is made.

Fix this so that the call can at least be aborted without failing on EBUSY. We have to be careful here as sendmsg() mustn't be allowed to start the call timer if the call doesn't yet have a connection assigned as an oops may follow shortly thereafter.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 7161cf61c64e9e9413d790f2fa2b9dada71a2249Affected
  • 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 876d96faacbc407daf4978d7ec95051b68f5344aAffected
  • 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 0eb362d254814ce04848730bf32e75b8ee1a4d6cAffected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 6.2.16 through 6.2.*Not affected
  • 6.3.3 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.