CVE-2023-53055None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete() fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot s…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
fscrypt: destroy keyring after security_sb_delete()
fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landlock LSM don't get evicted until security_sb_delete(), this means that fscrypt_destroy_keyring() must be called after security_sb_delete().
This fixes a WARN_ON followed by a NULL dereference, only possible if Landlock was being used on encrypted files.
Linux >= e6f4fd85ef1ee6ab356bfbd64df28c1cb73aee7e < 992a3f3e8a0c92151dfdf65fc85567c865fd558aLinux >= d7e7b9af104c7b389a0c21eb26532511bce4b510 < d77531fac6a1fd9f1db0195438ba5419d72b96c4Linux >= d7e7b9af104c7b389a0c21eb26532511bce4b510 < 497ab5d9c7852dfedab2c9de75e41b60e54b7c5dLinux >= d7e7b9af104c7b389a0c21eb26532511bce4b510 < ccb820dc7d2236b1af0d54ae038a27b5b6d5ae5aLinux 391cceee6d435e616f68631e68f5b32d480b1e67Linux 68d15d6558a386f46d815a6ac39edecad713a1bfLinux >= 5.15.78 < 5.15.105Linux >= 5.10.154 < 5.11Linux >= 6.0.8 < 6.1Linux 6.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses