PT-2025-13352 · Linux+4 · Linux Kernel+4

Published 2023-11-07 · Updated 2025-09-29 · CVE-2023-53006

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel, specifically in the cifs component. It involves a problem where the server->smbd conn pointer is not cleared after freeing the smbd connection struct it points to, leading to potential confusion during reconnection. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2025_16880

BDU:2025-06359

CVE-2023-53006

OPENSUSE-SU-2025_1195-1

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 1489

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53006.json · Exploit
• https://git.kernel.org/stable/c/4b83bc6f87eedab4599b0123e572a422689444be · Patch
• https://git.kernel.org/stable/c/5109607a4ece7cd8536172bf7549eb4dce1f3576 · Patch
• https://git.kernel.org/stable/c/a9640c0b268405f2540e8203a545e930ea88bb7d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53006 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53006 · Vendor Advisory
• https://git.kernel.org/stable/c/91be54849d5392050f5b847b42bd5e6221551ac8 · Patch
• https://bdu.fstec.ru/vul/2025-06359 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53006 · Vendor Advisory
• https://git.kernel.org/stable/c/e037baee16e0b9ace7e730888fcae9cec11daff2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53006 · Vendor Advisory