Paper/Archive/CVE-2023-53006

CVE-2023-53006

Linux Linux — cifs: Fix oops due to uncleared server->smbd_conn in reconnect

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 46.1.461 × 209.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbd_destroy(), clear the server->smbd_conn pointer after freeing the smbd_connection struct that it points to so that reconnection doesn't get confused.

Affected

ProductAffectedFixed inSource

Linux8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < a9640c0b268405f2540e8203a545e930ea88bb7da9640c0b268405f2540e8203a545e930ea88bb7dCNA

Linux8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < 91be54849d5392050f5b847b42bd5e6221551ac891be54849d5392050f5b847b42bd5e6221551ac8CNA

Linux8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < e037baee16e0b9ace7e730888fcae9cec11daff2e037baee16e0b9ace7e730888fcae9cec11daff2CNA

Linux8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < 4b83bc6f87eedab4599b0123e572a422689444be4b83bc6f87eedab4599b0123e572a422689444beCNA

Linux8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < 5109607a4ece7cd8536172bf7549eb4dce1f35765109607a4ece7cd8536172bf7549eb4dce1f3576CNA

Linux8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7CNA

Linux4.164.19.272CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgit.kernel.org/stable/c/a9640c0b268405f2540e8203a545e930ea88bb7d refgit.kernel.org/stable/c/91be54849d5392050f5b847b42bd5e6221551ac8 refgit.kernel.org/stable/c/e037baee16e0b9ace7e730888fcae9cec11daff2 refgit.kernel.org/stable/c/4b83bc6f87eedab4599b0123e572a422689444be refgit.kernel.org/stable/c/5109607a4ece7cd8536172bf7549eb4dce1f3576 refgit.kernel.org/stable/c/b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7