---
id: CVE-2023-54128
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fs: drop peer group ids under namespace lock

  When cleaning up peer group ids in the failure path we need to make sure
  to hold on to the namespace lock
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fs: drop peer group ids under namespace lock

  When cleaning up peer group ids in the failure path we need to make sure
  to hold on to the namespace lock. Otherwise anoth…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    0af8fae81d8b7f1beddc17c5d4cfa43235134648
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    ddca03d97daa7b07b60c52e3d3060762732c6666
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    65c324d3f35c05e37afec39ac80743583fdcc96c
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    cb2239c198ad9fbd5aced22cf93e45562da781eb
  - Linux 5.12
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:53.643'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-54128'
references:
  - url: 'https://git.kernel.org/stable/c/0af8fae81d8b7f1beddc17c5d4cfa43235134648'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/65c324d3f35c05e37afec39ac80743583fdcc96c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cb2239c198ad9fbd5aced22cf93e45562da781eb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ddca03d97daa7b07b60c52e3d3060762732c6666'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00165
epssPercentile: 0.05714
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:38:42.661717Z'
ingestedAt: '2026-10-15T22:48:25.430Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fs: drop peer group ids under namespace lock

When cleaning up peer group ids in the failure path we need to make sure
to hold on to the namespace lock. Otherwise another thread might just
turn the mount from a shared into a non-shared mount concurrently.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.