PT-2023-8800 · Linux+5 · Linux Kernel+5
Zhang Xiaoxu
·
Published
2023-09-19
·
Updated
2026-05-26
·
CVE-2023-52572
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc4+
Description
The issue is related to a use-after-free (UAF) vulnerability in the
cifs demultiplex thread() function. This vulnerability can be exploited by an attacker to potentially execute arbitrary code. The UAF occurs when the mid->resp buf is freed while still being used by the cifs demultiplex thread(). The vulnerability can be easily reproduced by adding a delay between steps [3] and [6] in the process. Only synchronous calls are affected, as asynchronous calls have their callbacks executed in the cifsd process.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the UAF in
cifs demultiplex thread(). As a temporary workaround, consider adding an extra state to mark the mid state to READY before waking up the waiter, allowing it to safely get the response.Exploit
Fix
Buffer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu