Linux Kernel CIFS Vulnerability in Data Handling

CVE-2023-53593

What is CVE-2023-53593?

A vulnerability exists in the Linux kernel's CIFS module that leads to improper handling of file locks during read operations. Specifically, when the function cifs_readpage_worker is executed, it fails to unlock the page lock under certain conditions, causing a lock leak when using fscache. This behavior results in a potential deadlock that can only be resolved with a system reboot. As the function does not free the folio lock after a cache hit, subsequent reads could lead to performance degradation and system stability issues.

References