CVE-2023-52479

ksmbd: fix uaf in smb20_oplock_break_ack

State: Published
Severity: 8.8 High
Published: Feb 29, 2024
Updated: Aug 15, 2026
Reserved: Feb 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix uaf in smb20_oplock_break_ack

drop reference after use opinfo.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 694e13732e830cbbfedb562e57f28644927c33fdAffected e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 8226ffc759ea59f10067b9acdf7f94bae1c69930Affected e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before d5b0e9d3563e7e314a850e81f42b2ef6f39882f9Affected e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before c69813471a1ec081a0b9bf0c6bd7e8afd818afceAffected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.135 through 5.15.Not affected 6.1.57 through 6.1.Not affected 6.5.7 through 6.5.*Not affected 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.