01 Record

CVE-2023-54219

Revert "IB/isert: Fix incorrect release of isert connection"

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

Revert "IB/isert: Fix incorrect release of isert connection"

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.69% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 52.6% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Deferred. NVD last modified this record on 2026-10-28.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-12-30 12:11Z10 MO AGO

Last updated

2026-08-05 09:18Z2 MO AGO

Reserved

2025-12-30

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

4b138daf333d931afd590e78256e2f9896a610190c73f7043604bf501bcd83d0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxccf5a1b28e2b73952e8d23126fa1abc6ff99de55 to < 77e90bd53019d4d4c9e25552b5efb06dfd8c3c82, fb4043077b51e577ecccb3233ecfb8764fcea393 to < a277b736309f923d9baff0ef166d694d348a5b96, 6718478c18a4f4923d86b81dc7e51363e1a60b03 to < 9b6296861a5a9d58aacd72c249a68b073c78bfb4, 3c97f2c9ec29ce2f61772f6120aabc852f57132e to < aa950b9835f2d004b071fd220459edd3cd0a3603, 18512de74454fba6ebd06e579f4f1a3200a9e50d to < 1bb42aca7a9611c1991a790834e2a65f3345c5e8, 277fbf63b34a377c800d25c7cfd8231ba19cffe2 to < 3f39698e7e842abc9bd2bd97bf5eeda4543db758, 699826f4e30ab76a62c238c86fbef7e826639c8d to < 4082b59705ee9e3912eaa9e15abda8e76039b681, 699826f4e30ab76a62c238c86fbef7e826639c8d to < a3189341e2f609d48f730b18c8bbbf6783233477, 699826f4e30ab76a62c238c86fbef7e826639c8d to < dfe261107c080709459c32695847eec96238852b, 2f884e6df67347301e51e6be5ad4b61cc8989114, 4.14.319 to < 4.14.326, 4.19.287 to < 4.19.295, 5.4.248 to < 5.4.257, 5.10.185 to < 5.10.195, 5.15.118 to < 5.15.132, 6.1.35 to < 6.1.53, 6.3.9 to < 6.4, 6.4—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/77e90bd53019d4d4c9e25552b5efb06dfd8c3c82
git.kernel.orghttps://git.kernel.org/stable/c/a277b736309f923d9baff0ef166d694d348a5b96
git.kernel.orghttps://git.kernel.org/stable/c/9b6296861a5a9d58aacd72c249a68b073c78bfb4
git.kernel.orghttps://git.kernel.org/stable/c/aa950b9835f2d004b071fd220459edd3cd0a3603
git.kernel.orghttps://git.kernel.org/stable/c/1bb42aca7a9611c1991a790834e2a65f3345c5e8
git.kernel.orghttps://git.kernel.org/stable/c/3f39698e7e842abc9bd2bd97bf5eeda4543db758
git.kernel.orghttps://git.kernel.org/stable/c/4082b59705ee9e3912eaa9e15abda8e76039b681
git.kernel.orghttps://git.kernel.org/stable/c/a3189341e2f609d48f730b18c8bbbf6783233477
git.kernel.orghttps://git.kernel.org/stable/c/dfe261107c080709459c32695847eec96238852b

07 Fixed in

Debian 12

linux
Fixed in 6.1.55-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.5.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.5.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.