CVE-2023-53131

SUNRPC: Fix a server shutdown leak

MEDIUM

5.5

CVSS Score

Published: May 2, 2025 at 03:56 PM UTC

Updated: June 17, 2026 at 06:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 4.9.524.12 ≤ v < 5.10.1754.12 ≤ v < 5.15.1034.12 ≤ v < 6.1.204.12 ≤ v < 6.2.74.12 ≤ v < 6.34.9.52 ≤ v < 4.105.11 ≤ v < 5.15.1035.16 ≤ v < 6.1.206.2 ≤ v < 6.2.74.12 4.9.52 6.3 rc1ed6473ddc704a2005b9900ca08e236ebb2d8540af609266b12d214437cf9d68245dc27f8d4f69836

Vendor states this is fixed in 7a3720361068ab520aed4608bad31ea9a6cc7fe7 (fixed)

Vendor states this is fixed in 9ca6705d9d609441d34f8b853e1e4a6369b3b171 (fixed)

Vendor states this is fixed in ad7e40ee157ba33950a4ccdc284334580da3638d (fixed)

Vendor states this is fixed in ce7dd61e004002bc1c48d1ca47c887f3f3cc7370 (fixed)

Vendor states this is fixed in f74b3286859463cd63cc9d4aeaabd8b0c640182a (fixed)

Affected range stops below 4.10, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 4.12 (unaffected)

Vendor states this is fixed in 5.10.175 (unaffected)

Vendor states this is fixed in 5.15.103 (unaffected)

Vendor states this is fixed in 6.1.20 (unaffected)

Vendor states this is fixed in 6.2.7 (unaffected)

Vendor states this is fixed in 6.3 (unaffected)