Vulnerability in Linux

CVE-2023-54128

In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When cleaning up peer group ids in the failure path we need to make sure to hold on to the namespace lock. Otherwise another thread might just turn the mount from a shared into a non-shared mount concurrently.

EPSS: 0.002 (8.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 2a1867219c7b27f928e2545782b86daaf9ad50bd, 5.12, 0

References

Frequently asked questions

What is CVE-2023-54128?
CVE-2023-54128 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-24.
How severe is CVE-2023-54128?
High severity. CVSS v3 base score is 7.8 out of 10.