{"id":"CVE-2023-53111","revision":"ca902538a7d24dd0bbeb24bd11d9c2eb","records":[{"revision":"ca902538a7d24dd0bbeb24bd11d9c2eb","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-53111","aliases":[],"title":"loop: Fix use-after-free issues","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nloop: Fix use-after-free issues\n\ndo_req_filebacked() calls blk_mq_complete_request() synchronously or\nasynchronously when using asynchronous I/O unless memory allocation fails.\nHence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor\n'rq' after do_req_filebacked() finished unless we are sure that the request\nhas not yet been completed. This patch fixes the following kernel crash:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000054\nCall trace:\n css_put.42938+0x1c/0x1ac\n loop_process_work+0xc8c/0xfd4\n loop_rootcg_workfn+0x24/0x34\n process_one_work+0x244/0x558\n worker_thread+0x400/0x8fc\n kthread+0x16c/0x1e0\n ret_from_fork+0x10/0x20","state":0,"publishedAt":"2025-05-02T15:55:51.029+00:00","modifiedAt":"2026-10-15T21:41:27.021+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/block/loop.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6\",\n                            \"lessThan\": \"407badf73ec9fb0d5744bf2ca1745c1818aa222f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6\",\n                            \"lessThan\": \"e3fda704903f6d1fc351412f1bc6620333959ada\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6\",\n                            \"lessThan\": \"6917395c4667cfb607ed8bf1826205a59414657c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bc07c10a3603a5ab3ef01ba42b3d41f9ac63d1b6\",\n                            \"lessThan\": \"9b0cb770f5d7b1ff40bea7ca385438ee94570eec\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/block/loop.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.104\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.21\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.2.8\",\n                            \"lessThanOrEqual\": \"6.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/407badf73ec9fb0d5744bf2ca1745c1818aa222f","https://git.kernel.org/stable/c/e3fda704903f6d1fc351412f1bc6620333959ada","https://git.kernel.org/stable/c/6917395c4667cfb607ed8bf1826205a59414657c","https://git.kernel.org/stable/c/9b0cb770f5d7b1ff40bea7ca385438ee94570eec"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53111","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-53111","identifiers":["CVE-2023-53111"]},"retained":false,"historicalAffected":[]}],"coverage":[]}