CVE Database›Document archive›CVE-2023-53131

CVE-2023-53131

kernel: SUNRPC: Fix a server shutdown leak

Loading…

Severity

Low

Red Hat Product Security

2.3

CVSS 3.1

Review impact separately from score.

Published · May 2, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a server shutdown leak

Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up.

Statement

A race condition in the SUNRPC server shutdown logic could lead to a memory/resource leak of the svc_rqst structure. The issue occurs if kthread_stop() is called before the associated kernel thread (threadfn) is actually scheduled to run. In this case, the thread's cleanup routine (svc_exit_thread()) is never called, resulting in leaked memory or unreleased resources. The patch addresses this by manually invoking cleanup if kthread_stop() returns -EINTR.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 2.3
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

CWE not specified