{
  "cveId": "CVE-2023-53629",
  "url": "https://patchblox.com/security/cve/CVE-2023-53629",
  "summary": "CVE-2023-53629 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53629, released October 7, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs: dlm: fix use after free in midcomms commit...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  fs: dlm: fix use after free in midcomms commit  While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning:  [  151.760477] ================================================================== [  151.761803] BUG: KASAN: use-after-free in dlm_midcomms_commit_mhandle\u002B0x19d/0x4b0 [  151.763414] Read of size 4 at addr ffff88811a980c60 by task lock_torture/1347  [  151.765284] CPU: 7 PID: 1347 Comm: lock_torture Not tainted 6.1.0-rc4\u002B #2828 [  151.766778] Hardware name: Red Hat KVM/RHEL-AV, BIOS 1.16.0-3.module\u002Bel8.7.0\u002B16134\u002Be5908aa2 04/01/2014 [  151.768726] Call Trace: [  151.769277]  \u003CTASK\u003E [  151.769748]  dump_stack_lvl\u002B0x5b/0x86 [  151.770556]  print_report\u002B0x180/0x4c8 [  151.771378]  ? kasan_complete_mode_report_info\u002B0x7c/0x1e0 [  151.772241]  ? dlm_midcomms_commit_mhandle\u002B0x19d/0x4b0 [  151.773069]  kasan_report\u002B0x93/0x1a0 [  151.773668]  ? dlm_midcomms_commit_mhandle\u002B0x19d/0x4b0 [  151.774514]  __asan_load4\u002B0x7e/0xa0 [  151.775089]  dlm_midcomms_commit_mhandle\u002B0x19d/0x4b0 [  151.775890]  ? create_message.isra.29.constprop.64\u002B0x57/0xc0 [  151.776770]  send_common\u002B0x19f/0x1b0 [  151.777342]  ? remove_from_waiters\u002B0x60/0x60 [  151.778017]  ? lock_downgrade\u002B0x410/0x410 [  151.778648]  ? __this_cpu_preempt_check\u002B0x13/0x20 [  151.779421]  ? rcu_lockdep_current_cpu_online\u002B0x88/0xc0 [  151.780292]  _convert_lock\u002B0x46/0x150 [  151.780893]  convert_lock\u002B0x7b/0xc0 [  151.781459]  dlm_lock\u002B0x3ac/0x580 [  151.781993]  ? 0xffffffffc0540000 [  151.782522]  ? torture_stop\u002B0x120/0x120 [dlm_locktorture] [  151.783379]  ? dlm_scan_rsbs\u002B0xa70/0xa70 [  151.784003]  ? preempt_count_sub\u002B0xd6/0x130 [  151.784661]  ? is_module_address\u002B0x47/0x70 [  151.785309]  ? torture_stop\u002B0x120/0x120 [dlm_locktorture] [  151.786166]  ? 0xffffffffc0540000 [  151.786693]  ? lockdep_init_map_type\u002B0xc3/0x360 [  151.787414]  ? 0xffffffffc0540000 [  151.787947]  torture_dlm_lock_sync.isra.3\u002B0xe9/0x150 [dlm_locktorture] [  151.789004]  ? torture_stop\u002B0x120/0x120 [dlm_locktorture] [  151.789858]  ? 0xffffffffc0540000 [  151.790392]  ? lock_torture_cleanup\u002B0x20/0x20 [dlm_locktorture] [  151.791347]  ? delay_tsc\u002B0x94/0xc0 [  151.791898]  torture_ex_iter\u002B0xc3/0xea [dlm_locktorture] [  151.792735]  ? torture_start\u002B0x30/0x30 [dlm_locktorture] [  151.793606]  lock_torture\u002B0x177/0x270 [dlm_locktorture] [  151.794448]  ? torture_dlm_lock_sync.isra.3\u002B0x150/0x150 [dlm_locktorture] [  151.795539]  ? lock_torture_stats\u002B0x80/0x80 [dlm_locktorture] [  151.796476]  ? do_raw_spin_lock\u002B0x11e/0x1e0 [  151.797152]  ? mark_held_locks\u002B0x34/0xb0 [  151.797784]  ? _raw_spin_unlock_irqrestore\u002B0x30/0x70 [  151.798581]  ? __kthread_parkme\u002B0x79/0x110 [  151.799246]  ? trace_preempt_on\u002B0x2a/0xf0 [  151.799902]  ? __kthread_parkme\u002B0x79/0x110 [  151.800579]  ? preempt_count_sub\u002B0xd6/0x130 [  151.801271]  ? __kasan_check_read\u002B0x11/0x20 [  151.801963]  ? __kthread_parkme\u002B0xec/0x110 [  151.802630]  ? lock_torture_stats\u002B0x80/0x80 [dlm_locktorture] [  151.803569]  kthread\u002B0x192/0x1d0 [  151.804104]  ? kthread_complete_and_exit\u002B0x30/0x30 [  151.804881]  ret_from_fork\u002B0x1f/0x30 [  151.805480]  \u003C/TASK\u003E  [  151.806111] Allocated by task 1347: [  151.806681]  kasan_save_stack\u002B0x26/0x50 [  151.807308]  kasan_set_track\u002B0x25/0x30 [  151.807920]  kasan_save_alloc_info\u002B0x1e/0x30 [  151.808609]  __kasan_slab_alloc\u002B0x63/0x80 [  151.809263]  kmem_cache_alloc\u002B0x1ad/0x830 [  151.809916]  dlm_allocate_mhandle\u002B0x17/0x20 [  151.810590]  dlm_midcomms_get_mhandle\u002B0x96/0x260 [  151.811344]  _create_message\u002B0x95/0x180 [  151.811994]  create_message.isra.29.constprop.64\u002B0x57/0xc0 [  151.812880]  send_common\u002B0x129/0x1b0 [  151.813467]  _convert_lock\u002B0x46/0x150 [  151.814074]  convert_lock\u002B0x7b/0xc0 [  151.814648]  dlm_lock\u002B0x3ac/0x580 [  151.815199]  torture_dlm_lock_sync.isra.3\u002B0xe9/0x150 [dlm_locktorture] [  151.816258]  torture_ex_iter\u002B0xc3/0xea [dlm_locktorture] [  151.817129]  lock_t ---truncated---",
  "published": "2025-10-07T16:15:45Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00498,
  "epssPercentile": 0.42931,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53629",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53629",
      "released": "2025-10-07T16:15:45Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53629",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53629",
      "released": "2025-10-07T16:15:45Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53629",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53629",
      "released": "2025-10-07T16:15:45Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}