What’s Vulnerable › Vulnerabilities

CVE-2023-52681: efivarfs: Free s_fs_info on unmount

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Free s_fs_info on unmount Now that we allocate a s_fs_info struct on fs context creation, we should ensure that we free it again when the superblock goes away.

Affected products

• Linux kernel: from 6.7 before 6.7.2 — fixed in 6.7.2

How to fix

Upgrade to a fixed version: Linux kernel 6.7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/547713d502f7b4b8efccd409cff84d731a23853b
• https://git.kernel.org/stable/c/92be3095c6ca1cdc46237839c6087555be9160e3
• https://git.kernel.org/stable/c/48be1364dd387e375e1274b76af986cb8747be2c
• https://git.kernel.org/stable/c/547713d502f7b4b8efccd409cff84d731a23853b
• https://git.kernel.org/stable/c/92be3095c6ca1cdc46237839c6087555be9160e3
• https://git.kernel.org/stable/c/ea6b597fcaca99562fa56a473bcbbbd79b40af03

Get alerted when CVE-2023-52681 or the next vulnerability affects your stack