First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-53117

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fs: prevent out-of-bounds array speculation when closing a file descriptor

Google-Bug-Id: 114199369

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f31cd5da636682caea424fa1c22679016cbfc16b; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3d5d9501b634fd268eb56428cda92cd317752d69; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6631c8da02cfad96c53b217cf647b511c7f34faf; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a759905de9cd6ec9ca08ceadf0920272772ed830; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f8cd8754a03a3748384ee438c572423643c9c315; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < cec08b7d1ebcd3138d4658b3868ce26aeb1e8e06; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < eea8e4e056a5ffbeb539a13854c017d5d62c756a; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 609d54441493c99f21c1823dfd66fa7f4c512ff4
Linux	Linux	2.6.12

References

Timeline

Published: May 2, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-531185.5In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsi_proc_h CVE-2023-531195.5In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533_out_arg properly struct pn533_out_CVE-2023-531205.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix config page DMA memory leak A fix for: DMA-API: pci CVE-2023-531215.5In the Linux kernel, the following vulnerability has been resolved: tcp: tcp_make_synack() can be called from process context tcp_rtx_syna CVE-2023-531237.8In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplu CVE-2023-531245.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() CVE-2023-531255.5In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retr CVE-2023-531265.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() Free mrio CVE-2023-531275.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mr_remove() Add a missing CVE-2023-531285.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix throttle_groups memory leak Add a missing kfree().CVE-2023-53133.7A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functiona CVE-2023-531315.5In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may

CVE-2023-53117: High severity, CVSS 7.1 | Vulnix