CVE-2023-53990

SMB3: Add missing locks to protect deferred close file list

State: Published
Severity: 7.8 High
Published: Dec 24, 2025
Updated: Aug 5, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

SMB3: Add missing locks to protect deferred close file list

cifs_del_deferred_close function has a critical section which modifies the deferred close file list. We must acquire deferred_lock before calling cifs_del_deferred_close function.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	860efae127888ae535bc4eda1b7f27642727c69e to before 0f87e18203bd30f71eb1a65259e28e291b6cc43aAffected ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before 3aa9d065b0685b4e6052f3f2a2462966fdc44fd2Affected ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before cb36365dac25d546ca4af0eb22acb43c9b4ddfdfAffected ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before 32a046ccaeea6c19965c04a4c521e703f6607924Affected ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before ab9ddc87a9055c4bebd6524d5d761d605d52e557Affected 60b6d38add7b9c17d6e5d49ee8e930ea1a5650c5Affected 5.15.63 to before 5.15.111Affected 5.19.4 to before 5.20Affected
LinuxLinux	6.0Affected before 6.0Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

860efae127888ae535bc4eda1b7f27642727c69e to before 0f87e18203bd30f71eb1a65259e28e291b6cc43aAffected
ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before 3aa9d065b0685b4e6052f3f2a2462966fdc44fd2Affected
ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before cb36365dac25d546ca4af0eb22acb43c9b4ddfdfAffected
ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before 32a046ccaeea6c19965c04a4c521e703f6607924Affected
ca08d0eac020d48a3141dbec0a3cf64fbdb17cde to before ab9ddc87a9055c4bebd6524d5d761d605d52e557Affected
60b6d38add7b9c17d6e5d49ee8e930ea1a5650c5Affected
5.15.63 to before 5.15.111Affected
5.19.4 to before 5.20Affected

LinuxLinux

6.0Affected
before 6.0Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.