by Kastro
Paper/Archive/CVE-2023-54076

CVE-2023-54076

Linux Linux — smb: client: fix missed ses refcounting

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 39.5.395 × 207.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper to get an active reference of @ses and @ses->dfs_root_ses (if set). This will prevent @ses->dfs_root_ses of being put in the next call to cifs_put_smb_ses() and thus potentially causing an use-after-free bug.

Affected

ProductAffectedFixed inSource
Linux8e3554150d6c80a84b3cb046615d1a0e943811dc – < eb382196e6f6e05cfafdab797840e5a96c6e7bf0eb382196e6f6e05cfafdab797840e5a96c6e7bf0CNA
Linux8e3554150d6c80a84b3cb046615d1a0e943811dc – < bf99f6be2d20146942bce6f9e90a0ceef12cbc1ebf99f6be2d20146942bce6f9e90a0ceef12cbc1eCNA
Linuxf30d226bcc9f0e2d97b4a6e94c43a28148fbeab6–CNA
Linuxc082c3be0f96e759ff2e361d929832fda0b93851–CNA
Linux6.2.15 – < 6.36.3CNA
Linux6.3.2 – < 6.46.4CNA
Linux6.46.4.7CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/eb382196e6f6e05cfafdab797840e5a96c6e7bf0refgit.kernel.org/stable/c/bf99f6be2d20146942bce6f9e90a0ceef12cbc1e