by Kastro
Paper/Archive/CVE-2023-53794

CVE-2023-53794

Linux Linux — cifs: fix session state check in reconnect to avoid use-after-free issue

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 43.5.435 × 208.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.

Affected

ProductAffectedFixed inSource
Linux4fcd1813e6404dd4420c7d12fb483f9320f0bf93 – < 7e4f5c3f01fb0e51ca438e43262d858daf9a0a767e4f5c3f01fb0e51ca438e43262d858daf9a0a76CNA
Linux4fcd1813e6404dd4420c7d12fb483f9320f0bf93 – < 759ffc164d95a32c09528766d74d9b4fb054e8f4759ffc164d95a32c09528766d74d9b4fb054e8f4CNA
Linux4fcd1813e6404dd4420c7d12fb483f9320f0bf93 – < 99f280700b4cc02d5f141b8d15f8e9fad0418f6599f280700b4cc02d5f141b8d15f8e9fad0418f65CNA
Linux655e0c067f0e02ece03fd0591dabe3db2ae27552–CNA
Linux875cc09c0767a4ac06b57af383709657f98b3ea1–CNA
Linux599fe1409085059ba12a2c3897c853be9fa9e7cf–CNA
Linux2e4378ee60049b752c9dce16f62ce6fbd11b379a–CNA
Linux59b520454b323ec43b2ae757217332cea33091e0–CNA
Linuxe20c888e2b3576e5f498c167729d274ef60b86f8–CNA
Linux4ce7aa4e44d88ce64ea8ae2337b8910f3670b0ba–CNA
Linux419fad68e4c4135ff9859e9214dd6cf954413ca1–CNA
Linux3.10.103 – < 3.113.11CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgit.kernel.org/stable/c/7e4f5c3f01fb0e51ca438e43262d858daf9a0a76refgit.kernel.org/stable/c/759ffc164d95a32c09528766d74d9b4fb054e8f4refgit.kernel.org/stable/c/99f280700b4cc02d5f141b8d15f8e9fad0418f65