Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-54076

smb: client: fix missed ses refcounting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper to get an active reference of @ses and @ses->dfs_root_ses (if set). This will prevent @ses->dfs_root_ses of being put in the next call to cifs_put_smb_ses() and thus potentially causing an use-after-free bug.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8e3554150d6c80a84b3cb046615d1a0e943811dc to < eb382196e6f6e05cfafdab797840e5a96c6e7bf0affected
  • 8e3554150d6c80a84b3cb046615d1a0e943811dc to < bf99f6be2d20146942bce6f9e90a0ceef12cbc1eaffected
  • f30d226bcc9f0e2d97b4a6e94c43a28148fbeab6affected
  • c082c3be0f96e759ff2e361d929832fda0b93851affected
  • 6.2.15 to < 6.3affected
  • 6.3.2 to < 6.4affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.4.7 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References