Use-After-Free Vulnerability in Linux Kernel's NFS Server

CVE-2023-53025

Summary

A use-after-free vulnerability exists within the Linux kernel's NFS server component, specifically in the nfsd4_ssc_setup_dul() function. This issue arises when signal_pending() returns true, preventing schedule_timeout() from executing, which keeps the waiting task in the wait queue longer than intended. The vulnerability has been addressed by implementing a call to finish_wait(), ensuring that the task is appropriately removed from the wait queue, mitigating the risk of exploitation.

References