PT-2025-49654 · Linux+1 · Linux Kernel+1
Published
2023-06-28
·
Updated
2026-05-26
·
CVE-2023-53794
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s CIFS implementation related to session state handling during reconnection attempts. Specifically, the issue involves not properly releasing exiting sessions in the
smb2 reconnect server() function, potentially leading to a use-after-free condition. The vulnerability occurs because exiting sessions are not immediately removed from the server’s session list, and can be accessed after they have been released.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linux Kernel