Riskcovery

CVE-2023-53711

NFS: Fix a potential data corruption

State
Published
Severity
8.2 High
Published
Oct 22, 2025
Updated
Oct 15, 2026
Reserved
Oct 22, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix a potential data corruption

We must ensure that the subrequests are joined back into the head before we can retransmit a request. If the head was not on the commit lists, because the server wrote it synchronously, we still need to add it back to the retransmission list. Add a call that mirrors the effect of nfs_cancel_remove_inode() for O_DIRECT.

Scores

CVSSScoreVectorSource
3.18.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:LLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ed5d588fe47feef290f271022820e255d8371561 to before 4185605cd0f72ec8bf8b423aacd94cd5ee13bbcfAffected
  • ed5d588fe47feef290f271022820e255d8371561 to before da302f1d476a44245823a74546debb5d160bf5bdAffected
  • ed5d588fe47feef290f271022820e255d8371561 to before dac14a1dbe20e003215dacb8a3a1a7e4ca4e0ad0Affected
  • ed5d588fe47feef290f271022820e255d8371561 to before 0ec26716e45d615edfff46012e7dedcc0ac5f7abAffected
  • ed5d588fe47feef290f271022820e255d8371561 to before 88975a55969e11f26fe3846bf4fbf8e7dc8cbbd4Affected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.10.195 through 5.10.*Not affected
  • 5.15.132 through 5.15.*Not affected
  • 6.1.54 through 6.1.*Not affected
  • 6.5.4 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.