---
id: CVE-2023-54128
title: 'fs: drop peer group ids under namespace lock'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fs: drop peer group ids under namespace lock

  When cleaning up peer group ids in the failure path we need to make sure
  to hold on to the namespace lock. Otherwise anoth…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    0af8fae81d8b7f1beddc17c5d4cfa43235134648
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    ddca03d97daa7b07b60c52e3d3060762732c6666
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    65c324d3f35c05e37afec39ac80743583fdcc96c
  - >-
    Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd <
    cb2239c198ad9fbd5aced22cf93e45562da781eb
  - Linux 5.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:38:42.661717Z'
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:41:40.328Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-54128'
references:
  - url: 'https://git.kernel.org/stable/c/0af8fae81d8b7f1beddc17c5d4cfa43235134648'
  - url: 'https://git.kernel.org/stable/c/ddca03d97daa7b07b60c52e3d3060762732c6666'
  - url: 'https://git.kernel.org/stable/c/65c324d3f35c05e37afec39ac80743583fdcc96c'
  - url: 'https://git.kernel.org/stable/c/cb2239c198ad9fbd5aced22cf93e45562da781eb'
tags:
  - cve.org
epss: 0.00165
epssPercentile: 0.05395
ingestedAt: '2026-10-15T22:48:25.430Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fs: drop peer group ids under namespace lock

When cleaning up peer group ids in the failure path we need to make sure
to hold on to the namespace lock. Otherwise another thread might just
turn the mount from a shared into a non-shared mount concurrently.

## Affected

- `Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd < 0af8fae81d8b7f1beddc17c5d4cfa43235134648`
- `Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd < ddca03d97daa7b07b60c52e3d3060762732c6666`
- `Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd < 65c324d3f35c05e37afec39ac80743583fdcc96c`
- `Linux >= 2a1867219c7b27f928e2545782b86daaf9ad50bd < cb2239c198ad9fbd5aced22cf93e45562da781eb`
- `Linux 5.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.