by Kastro
Paper/Archive/CVE-2023-53751

CVE-2023-53751

Linux Linux — cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 35.8.358 × 207.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

Affected

ProductAffectedFixed inSource
Linux93d5cb517db39e8af8d1292f9e785e4983b7f708 – < 64d62ac6d6514cba1305bd08e271ec1843bdd61264d62ac6d6514cba1305bd08e271ec1843bdd612CNA
Linux93d5cb517db39e8af8d1292f9e785e4983b7f708 – < c511954bf142fe1995aec3c739a9f1a76990283ac511954bf142fe1995aec3c739a9f1a76990283aCNA
Linux93d5cb517db39e8af8d1292f9e785e4983b7f708 – < 0b08c4c499200be67d54c439d56e5ea8668699450b08c4c499200be67d54c439d56e5ea866869945CNA
Linux93d5cb517db39e8af8d1292f9e785e4983b7f708 – < 90c49fce1c43e1cc152695e20363ff5087897c0990c49fce1c43e1cc152695e20363ff5087897c09CNA
Linux5.0–CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/64d62ac6d6514cba1305bd08e271ec1843bdd612refgit.kernel.org/stable/c/c511954bf142fe1995aec3c739a9f1a76990283arefgit.kernel.org/stable/c/0b08c4c499200be67d54c439d56e5ea866869945refgit.kernel.org/stable/c/90c49fce1c43e1cc152695e20363ff5087897c09