PT-2025-54126 · Linux+1 · Linux Kernel+1

Published

2023-01-01

·

Updated

2026-05-26

·

CVE-2023-54280

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A race condition exists when tree connecting to the Inter-Process Communication (IPC). Access to TCP Server Info::hostname is not adequately protected when building the IPC tree name, potentially leading to a use-after-free issue in the tree connect dfs target() function. The status of the IPC transaction connection (tcon) is updated on success, preventing unnecessary additional tree connects.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54280
SUSE-SU-2026:0263-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1

Affected Products

Debian
Linux Kernel