CVE-2023-52681: efivarfs: Free s_fs_info on unmount
In the Linux kernel, the following vulnerability has been resolved:
efivarfs: Free sfsinfo on unmount
Now that we allocate a sfsinfo struct on fs context creation, we should ensure that we free it again when the superblock goes away.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Operational
Free the efivarfs s_fs_info allocation when the superblock goes away during unmount.
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52681?
CVE-2023-52681 is classified as a low-severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52681?
To fix CVE-2023-52681, update your Linux kernel to one of the patched versions such as 5.10.223-1 or 6.12.11-1.
Which versions of Linux are affected by CVE-2023-52681?
CVE-2023-52681 affects specific versions of the Linux kernel including 5.10.223-1, 5.10.226-1, and 6.1.119-1.
What component is impacted by CVE-2023-52681?
CVE-2023-52681 impacts the efivarfs component within the Linux kernel.
Is CVE-2023-52681 a remote exploit vulnerability?
CVE-2023-52681 does not appear to be categorized as a remote exploit vulnerability.