linux-cve-announce - CVE-2023-53391: shmem: use ramfs_kill_sb() for kill

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <2025091858-CVE-2023-53391-cea3@gregkh>
Date: Thu, 18 Sep 2025 15:34:36 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-cve-announce@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...nel.org>
Subject: CVE-2023-53391: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs

From: Greg Kroah-Hartman <gregkh@...nel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs

As the ramfs-based tmpfs uses ramfs_init_fs_context() for the
init_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb()
to free it and avoid a memory leak.

The Linux kernel CVE team has assigned CVE-2023-53391 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 2.6.30 with commit c3b1b1cbf002e65a3cabd479e68b5f35886a26db and fixed in 5.10.188 with commit 5fada375113767b3b57f1b04f7a4fe64ffaa626f
	Issue introduced in 2.6.30 with commit c3b1b1cbf002e65a3cabd479e68b5f35886a26db and fixed in 5.15.121 with commit 487f229efea80c00dd7397547ec4f25fb8999d99
	Issue introduced in 2.6.30 with commit c3b1b1cbf002e65a3cabd479e68b5f35886a26db and fixed in 6.1.39 with commit 1f34bf8b442c6d720e7fa6f15e8702427e48aea9
	Issue introduced in 2.6.30 with commit c3b1b1cbf002e65a3cabd479e68b5f35886a26db and fixed in 6.4.4 with commit ebe07db840992a3886694ac3d303b06f4b70ce00
	Issue introduced in 2.6.30 with commit c3b1b1cbf002e65a3cabd479e68b5f35886a26db and fixed in 6.5 with commit 36ce9d76b0a93bae799e27e4f5ac35478c676592

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2023-53391
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	fs/ramfs/inode.c
	include/linux/ramfs.h
	mm/shmem.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/5fada375113767b3b57f1b04f7a4fe64ffaa626f
	https://git.kernel.org/stable/c/487f229efea80c00dd7397547ec4f25fb8999d99
	https://git.kernel.org/stable/c/1f34bf8b442c6d720e7fa6f15e8702427e48aea9
	https://git.kernel.org/stable/c/ebe07db840992a3886694ac3d303b06f4b70ce00
	https://git.kernel.org/stable/c/36ce9d76b0a93bae799e27e4f5ac35478c676592