Vulnerability · Published Oct 1, 2025 · Assigned by Linux
CVE-2023-53494crypto: xts - Handle EBUSY correctly
High 7.8
In plain English
A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | kernel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-doc | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-headers | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-debug | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-debug-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-debug-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-64k-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-kvm | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-tools | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-uki-virt-addons | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | libperf | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | perf | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | python3-perf | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | rtla | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| AlmaLinux:9 | rv | 5.14.0-570.60.1.el9_6 | ALSA-2025:19409 |
| Debian:12 | linux | 6.1.20-1 | DEBIAN-CVE-2023-53494 |
| Debian:13 | linux | 6.1.20-1 | DEBIAN-CVE-2023-53494 |
| Debian:14 | linux | 6.1.20-1 | DEBIAN-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux | 5.15.0-75.82 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1038.43 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1040.47 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1041.48.1 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1036.44 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1036.41 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1022.27 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1032.35 | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-intel | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1033.38 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1035.40 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-75.82 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1027.27 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1015.15 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1037.43 | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1032.35 | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2023-53494 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2023-53494 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 8083b1bf8163e7ae7d8c90f221106d96450b8aa8 – before 92a07ba4f0af2cccdc2aa5ee32679c9c9714db908083b1bf8163e7ae7d8c90f221106d96450b8aa8 – before 912eb10b65646ffd222256c78a1c566a3dac177d8083b1bf8163e7ae7d8c90f221106d96450b8aa8 – before 57c3e1d63b63dc0841d41df729297cd7c1c358088083b1bf8163e7ae7d8c90f221106d96450b8aa8 – before d5870848879291700fe6c5257dcb48aadd10425c8083b1bf8163e7ae7d8c90f221106d96450b8aa8 – before 51c082514c2dedf2711c99d93c196cc4eedceb40 |
| Linux | Linux | 5.4 |
References
- https://git.kernel.org/stable/c/92a07ba4f0af2cccdc2aa5ee32679c9c9714db90
- https://git.kernel.org/stable/c/912eb10b65646ffd222256c78a1c566a3dac177d
- https://git.kernel.org/stable/c/57c3e1d63b63dc0841d41df729297cd7c1c35808
- https://git.kernel.org/stable/c/d5870848879291700fe6c5257dcb48aadd10425c
- https://git.kernel.org/stable/c/51c082514c2dedf2711c99d93c196cc4eedceb40