CVE-2023-53381

NFSD: fix leaked reference count of nfsd4_ssc_umount_item

State: Published
Severity: 7.5 High
Published: Sep 18, 2025
Updated: Aug 5, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

NFSD: fix leaked reference count of nfsd4_ssc_umount_item

The reference count of nfsd4_ssc_umount_item is not decremented on error conditions. This prevents the laundromat from unmounting the vfsmount of the source file.

This patch decrements the reference count of nfsd4_ssc_umount_item on error.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a4bc287943f5695209ff36bdc89f17b48d68fae7 to before 2da50149981d05955e51c28e982e9ac29bd73417Affected f4e44b393389c77958f7c58bf4415032b4cda15b to before 80a15dc4a0214b55ca42675bb0bb2a8d857eb1d0Affected f4e44b393389c77958f7c58bf4415032b4cda15b to before 9f0df37520a27ad99eaacf38418b3d2bb5023105Affected f4e44b393389c77958f7c58bf4415032b4cda15b to before 6c3c05402547aaca3edb23327b50f01a881831b9Affected f4e44b393389c77958f7c58bf4415032b4cda15b to before 34e8f9ec4c9ac235f917747b23a200a5e0ec857bAffected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.154 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

a4bc287943f5695209ff36bdc89f17b48d68fae7 to before 2da50149981d05955e51c28e982e9ac29bd73417Affected
f4e44b393389c77958f7c58bf4415032b4cda15b to before 80a15dc4a0214b55ca42675bb0bb2a8d857eb1d0Affected
f4e44b393389c77958f7c58bf4415032b4cda15b to before 9f0df37520a27ad99eaacf38418b3d2bb5023105Affected
f4e44b393389c77958f7c58bf4415032b4cda15b to before 6c3c05402547aaca3edb23327b50f01a881831b9Affected
f4e44b393389c77958f7c58bf4415032b4cda15b to before 34e8f9ec4c9ac235f917747b23a200a5e0ec857bAffected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.154 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.