Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-52480

ksmbd: fix race condition between session lookup and expire

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a6a9601ba995d0fec635324cb9fd8d14f9bea14e to < c77fd3e25a51ac92b0f1b347a96eff6a0b4f066faffected
  • 1fc8a2b14ef5223f8e0b95faba2ee0a6e4d0f99d to < a2ca5fd3dbcc665e1169044fa0c9e3eba779202baffected
  • ea174a91893956450510945a0c5d1a10b5323656 to < 18ced78b0ebccc2d16f426143dc56ab3aad666beaffected
  • ea174a91893956450510945a0c5d1a10b5323656 to < 53ff5cf89142b978b1a5ca8dc4d4425e6a09745faffected
  • 750a2d772e9d9ff377fd32e3b6797bf2cd847a7aaffected
  • 6775ee7ef4b37c521aa4cf3730f54554c4875542affected
  • 6.1.29 to < 6.1.57affected
  • 6.2.16 to < 6.3affected
  • 6.3.2 to < 6.4affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.1.57 to ≤ 6.1.*unaffected
  • 6.5.7 to ≤ 6.5.*unaffected
  • 6.6 to ≤ *unaffected

References