{ "cveId": "CVE-2023-54258", "url": "https://patchblox.com/security/cve/CVE-2023-54258", "summary": "CVE-2023-54258 is fixed in 38 products on 1 platform, first by ALAS2023-2023-330, released August 31, 2023. It is not reported as exploited. Patch Radar priority: Urgent.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break W...", "description": "In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have closes that race with lease breaks, and so with the current checks for whether to send the lease response, oplock_response(), this can mean that an unmount (kill_sb) can occur just before we were checking if the tcon-\u003Eses is valid. See below: [Fri Aug 4 04:12:50 2023] RIP: 0010:cifs_oplock_break\u002B0x1f7/0x5b0 [cifs] [Fri Aug 4 04:12:50 2023] Code: 7d a8 48 8b 7d c0 c0 e9 02 48 89 45 b8 41 89 cf e8 3e f5 ff ff 4c 89 f7 41 83 e7 01 e8 82 b3 03 f2 49 8b 45 50 48 85 c0 74 5e \u003C48\u003E 83 78 60 00 74 57 45 84 ff 75 52 48 8b 43 98 48 83 eb 68 48 39 [Fri Aug 4 04:12:50 2023] RSP: 0018:ffffb30607ddbdf8 EFLAGS: 00010206 [Fri Aug 4 04:12:50 2023] RAX: 632d223d32612022 RBX: ffff97136944b1e0 RCX: 0000000080100009 [Fri Aug 4 04:12:50 2023] RDX: 0000000000000001 RSI: 0000000080100009 RDI: ffff97136944b188 [Fri Aug 4 04:12:50 2023] RBP: ffffb30607ddbe58 R08: 0000000000000001 R09: ffffffffc08e0900 [Fri Aug 4 04:12:50 2023] R10: 0000000000000001 R11: 000000000000000f R12: ffff97136944b138 [Fri Aug 4 04:12:50 2023] R13: ffff97149147c000 R14: ffff97136944b188 R15: 0000000000000000 [Fri Aug 4 04:12:50 2023] FS: 0000000000000000(0000) GS:ffff9714f7c00000(0000) knlGS:0000000000000000 [Fri Aug 4 04:12:50 2023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [Fri Aug 4 04:12:50 2023] CR2: 00007fd8de9c7590 CR3: 000000011228e000 CR4: 0000000000350ef0 [Fri Aug 4 04:12:50 2023] Call Trace: [Fri Aug 4 04:12:50 2023] \u003CTASK\u003E [Fri Aug 4 04:12:50 2023] process_one_work\u002B0x225/0x3d0 [Fri Aug 4 04:12:50 2023] worker_thread\u002B0x4d/0x3e0 [Fri Aug 4 04:12:50 2023] ? process_one_work\u002B0x3d0/0x3d0 [Fri Aug 4 04:12:50 2023] kthread\u002B0x12a/0x150 [Fri Aug 4 04:12:50 2023] ? set_kthread_struct\u002B0x50/0x50 [Fri Aug 4 04:12:50 2023] ret_from_fork\u002B0x22/0x30 [Fri Aug 4 04:12:50 2023] \u003C/TASK\u003E To fix this change the ordering of the checks before sending the oplock_response to first check if the openFileList is empty.", "published": "2023-08-31T21:45:00Z", "severity": "critical", "cvss": 9.8, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.00555, "epssPercentile": 0.4662, "priority": "Urgent", "priorityTier": 2, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.20.24.1", "fix": "SUSE-SU-2026:0281-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0281-1", "released": "2026-01-23T16:03:47Z" }, { "platform": "linux", "product": "kernel-debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1.150600.12.38.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.84.1.150600.12.38.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1.150700.17.19.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-devel", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-headers", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-libbpf", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.1.49-69.116", "release": "amzn 2023", "fixedVersion": "1.0-0.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6_Update_19", "release": "sles 15.6", "fixedVersion": "1-150600.13.3.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7-RT_Update_8", "release": "sles 15.7", "fixedVersion": "1-150700.1.3.1", "fix": "SUSE-SU-2026:0278-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0278-1", "released": "2026-01-23T15:08:32Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7_Update_8", "release": "sles 15.7", "fixedVersion": "1-150700.15.3.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.20.24.1", "fix": "SUSE-SU-2026:0281-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0281-1", "released": "2026-01-23T16:03:47Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.20.24.1", "fix": "SUSE-SU-2026:0281-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0281-1", "released": "2026-01-23T16:03:47Z" }, { "platform": "linux", "product": "kernel-tools", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.84.1", "fix": "SUSE-SU-2026:0293-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0293-1", "released": "2026-01-26T11:36:42Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.4.13-1", "fix": "DEBIAN-CVE-2023-54258", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54258", "released": "2025-12-30T13:16:14Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.4.13-1", "fix": "DEBIAN-CVE-2023-54258", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54258", "released": "2025-12-30T13:16:14Z" }, { "platform": "linux", "product": "perf", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" }, { "platform": "linux", "product": "python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.49-69.116.amzn2023", "fix": "ALAS2023-2023-330", "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330", "released": "2023-08-31T21:45:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-11T07:45:43Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }