CVE-2023-54128

In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When cleaning up peer group ids in the failure path we need to make sure to hold on to the namespace lock. Otherwise another thread might just turn the mount from a shared into a non-shared mount concurrently.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/0af8fae81d8b7f1beddc17c5d4cfa43235134648
https://git.kernel.org/stable/c/65c324d3f35c05e37afec39ac80743583fdcc96c
https://git.kernel.org/stable/c/cb2239c198ad9fbd5aced22cf93e45562da781eb
https://git.kernel.org/stable/c/ddca03d97daa7b07b60c52e3d3060762732c6666

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-24 13:16

Updated : 2026-08-04 10:19

NVD link : CVE-2023-54128

Mitre link : CVE-2023-54128

CVE.ORG link : CVE-2023-54128

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-54128", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2a1867219c7b27f928e2545782b86daaf9ad50bd", "lessThan": "0af8fae81d8b7f1beddc17c5d4cfa43235134648", "versionType": "git"}, {"status": "affected", "version": "2a1867219c7b27f928e2545782b86daaf9ad50bd", "lessThan": "ddca03d97daa7b07b60c52e3d3060762732c6666", "versionType": "git"}, {"status": "affected", "version": "2a1867219c7b27f928e2545782b86daaf9ad50bd", "lessThan": "65c324d3f35c05e37afec39ac80743583fdcc96c", "versionType": "git"}, {"status": "affected", "version": "2a1867219c7b27f928e2545782b86daaf9ad50bd", "lessThan": "cb2239c198ad9fbd5aced22cf93e45562da781eb", "versionType": "git"}], "programFiles": ["fs/namespace.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.12"}, {"status": "unaffected", "version": "0", "lessThan": "5.12", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.107", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.24", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.11", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/namespace.c"], "defaultStatus": "affected"}]}], "published": "2025-12-24T13:16:14.787", "references": [{"url": "https://git.kernel.org/stable/c/0af8fae81d8b7f1beddc17c5d4cfa43235134648", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/65c324d3f35c05e37afec39ac80743583fdcc96c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cb2239c198ad9fbd5aced22cf93e45562da781eb", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ddca03d97daa7b07b60c52e3d3060762732c6666", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: drop peer group ids under namespace lock\n\nWhen cleaning up peer group ids in the failure path we need to make sure\nto hold on to the namespace lock. Otherwise another thread might just\nturn the mount from a shared into a non-shared mount concurrently."}], "lastModified": "2026-08-04T10:19:30.513", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}