Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-53794

cifs: fix session state check in reconnect to avoid use-after-free issue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to < 7e4f5c3f01fb0e51ca438e43262d858daf9a0a76affected
  • 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to < 759ffc164d95a32c09528766d74d9b4fb054e8f4affected
  • 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to < 99f280700b4cc02d5f141b8d15f8e9fad0418f65affected
  • 655e0c067f0e02ece03fd0591dabe3db2ae27552affected
  • 875cc09c0767a4ac06b57af383709657f98b3ea1affected
  • 599fe1409085059ba12a2c3897c853be9fa9e7cfaffected
  • 2e4378ee60049b752c9dce16f62ce6fbd11b379aaffected
  • 59b520454b323ec43b2ae757217332cea33091e0affected
  • e20c888e2b3576e5f498c167729d274ef60b86f8affected
  • 4ce7aa4e44d88ce64ea8ae2337b8910f3670b0baaffected
  • 419fad68e4c4135ff9859e9214dd6cf954413ca1affected
  • 3.10.103 to < 3.11affected
  • 3.12.63 to < 3.13affected
  • 3.14.74 to < 3.15affected
  • 3.16.37 to < 3.17affected
  • 3.18.37 to < 3.19affected
  • 4.1.28 to < 4.2affected
  • 4.4.16 to < 4.5affected
  • 4.6.5 to < 4.7affected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 6.1.47 to ≤ 6.1.*unaffected
  • 6.4.12 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References