What is CVE-2023-53867?

CVE-2023-53867 is a critical-severity vulnerability in Linux. CVSS score: 9.8/10. Published 2025-12-24.

How severe is CVE-2023-53867?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Linux

CVE-2023-53867

In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trimming caps When trimming the caps and just after the 'session->s_cap_lock' is released in ceph_iterate_session_caps() the cap maybe removed by another thread, and when using the stale cap memory in the callbacks it will trigger use-after-free crash. We need to check the existence of the cap just after the 'ci->i_ceph_lock' being acquired. And do nothing if it's already removed.

EPSS: 0.002 (7.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 2f2dc053404febedc9c273452d9d518fb31fde72, 2.6.34, 0

References

Frequently asked questions

What is CVE-2023-53867?: CVE-2023-53867 is a critical-severity vulnerability in Linux. CVSS score: 9.8/10. Published 2025-12-24.
How severe is CVE-2023-53867?: Critical severity. CVSS v3 base score is 9.8 out of 10.