Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53055

fscrypt: destroy keyring after security_sb_delete()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete() fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landlock LSM don't get evicted until security_sb_delete(), this means that fscrypt_destroy_keyring() must be called *after* security_sb_delete(). This fixes a WARN_ON followed by a NULL dereference, only possible if Landlock was being used on encrypted files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e6f4fd85ef1ee6ab356bfbd64df28c1cb73aee7e to < 992a3f3e8a0c92151dfdf65fc85567c865fd558aaffected
  • d7e7b9af104c7b389a0c21eb26532511bce4b510 to < d77531fac6a1fd9f1db0195438ba5419d72b96c4affected
  • d7e7b9af104c7b389a0c21eb26532511bce4b510 to < 497ab5d9c7852dfedab2c9de75e41b60e54b7c5daffected
  • d7e7b9af104c7b389a0c21eb26532511bce4b510 to < ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5aaffected
  • 391cceee6d435e616f68631e68f5b32d480b1e67affected
  • 68d15d6558a386f46d815a6ac39edecad713a1bfaffected
  • 5.15.78 to < 5.15.105affected
  • 5.10.154 to < 5.11affected
  • 6.0.8 to < 6.1affected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 5.15.105 to ≤ 5.15.*unaffected
  • 6.1.22 to ≤ 6.1.*unaffected
  • 6.2.9 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References