What’s Vulnerable › Vulnerabilities

CVE-2023-53131: SUNRPC: Fix a server shutdown leak

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-02 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.

Affected products

• Linux kernel: from 4.9.52 before 4.10; from 4.12 before 5.10.175; from 5.11 before 5.15.103; from 5.16 before 6.1.20; from 6.2 before 6.2.7; 6.3-rc1 — fixed in 4.10, 5.10.175, 5.15.103, 6.1.20, 6.2.7

How to fix

Upgrade to a fixed version: Linux kernel 4.10, 5.10.175, 5.15.103, 6.1.20. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/7a3720361068ab520aed4608bad31ea9a6cc7fe7
• https://git.kernel.org/stable/c/9ca6705d9d609441d34f8b853e1e4a6369b3b171
• https://git.kernel.org/stable/c/ad7e40ee157ba33950a4ccdc284334580da3638d
• https://git.kernel.org/stable/c/ce7dd61e004002bc1c48d1ca47c887f3f3cc7370
• https://git.kernel.org/stable/c/f74b3286859463cd63cc9d4aeaabd8b0c640182a

Get alerted when CVE-2023-53131 or the next vulnerability affects your stack