CVE-2023-53381

In the Linux kernel, the following vulnerability has been resolved:

NFSD: fix leaked reference count of nfsd4_ssc_umount_item

The reference count of nfsd4_ssc_umount_item is not decremented on error conditions. This prevents the laundromat from unmounting the vfsmount of the source file.

This patch decrements the reference count of nfsd4_ssc_umount_item on error.

This vulnerability is rated as Moderate severity because it requires local access to trigger and only results in a denial of service via kernel resource leaks, without allowing arbitrary code execution or data exposure. The flaw occurs within the kernel NFS daemon's server-side copy mechanism, where unhandled error paths prevent background maintenance threads from freeing unmounted file system resources. Systems that do not actively export file systems via the NFS server or handle server-side copy operations are not susceptible to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.