PT-2025-49654 · Linux+1 · Linux Kernel+1
CVE-2023-53794
·
Publicado
2023-06-28
·
Atualizado
2026-07-14
CVSS v2.0
6.0
Média
| Vetor | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s CIFS implementation related to session state handling during reconnection attempts. Specifically, the issue involves not properly releasing exiting sessions in the
smb2 reconnect server() function, potentially leading to a use-after-free condition. The vulnerability occurs because exiting sessions are not immediately removed from the server’s session list, and can be accessed after they have been released.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Linux Kernel