BaselineWatch
Desk

CVE-2023-53116

7.8 high SSVC exploitation: none Modified

In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() operation implementation may free the request passed as argument. Such implementation potentially could result in a use after free of the request pointer when percpu_ref_put() is called in nvmet_req_complete(). Avoid such problem by using a local variable to save the sq pointer before calling __nvmet_req_complete(), thus avoiding dereferencing the req pointer after that function call.

Fix

Patch, vendor advisory and mitigation references on NVD 8

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 7.8 · linuxNVD modified 2026-10-15 22:17

Affected (CPE criteria) 3

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*

References 8