In the Linux kernel, the following vulnerability has been resolved:
fscrypt: destroy keyring after security_sb_delete()
fscrypt_destroy_keyring() must be called after all potentially-encrypted
inodes were evicted; otherwise it cannot safely destroy the keyring.
Since inodes that are in-use by the Landlock LSM don't get evicted until
security_sb_delete(), this means that fscrypt_destroy_keyring() must be
called *after* security_sb_delete().
This fixes a WARN_ON followed by a NULL dereference, only possible if
Landlock was being used on encrypted files.
References
Configurations
Configuration 1 (hide)
|
History
12 Nov 2025, 17:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-476 | |
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/497ab5d9c7852dfedab2c9de75e41b60e54b7c5d - Patch | |
| References | () https://git.kernel.org/stable/c/992a3f3e8a0c92151dfdf65fc85567c865fd558a - Patch | |
| References | () https://git.kernel.org/stable/c/ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5a - Patch | |
| References | () https://git.kernel.org/stable/c/d77531fac6a1fd9f1db0195438ba5419d72b96c4 - Patch |
Information
Published : 2025-05-02 16:15
Updated : 2025-11-12 17:49
NVD link : CVE-2023-53055
Mitre link : CVE-2023-53055
CVE.ORG link : CVE-2023-53055
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference