Riskcovery

CVE-2023-52480

ksmbd: fix race condition between session lookup and expire

State
Published
Severity
9.8 Critical
Published
Feb 29, 2024
Updated
Aug 15, 2026
Reserved
Feb 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix race condition between session lookup and expire

Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | +

This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a6a9601ba995d0fec635324cb9fd8d14f9bea14e to before c77fd3e25a51ac92b0f1b347a96eff6a0b4f066fAffected
  • 1fc8a2b14ef5223f8e0b95faba2ee0a6e4d0f99d to before a2ca5fd3dbcc665e1169044fa0c9e3eba779202bAffected
  • ea174a91893956450510945a0c5d1a10b5323656 to before 18ced78b0ebccc2d16f426143dc56ab3aad666beAffected
  • ea174a91893956450510945a0c5d1a10b5323656 to before 53ff5cf89142b978b1a5ca8dc4d4425e6a09745fAffected
  • 750a2d772e9d9ff377fd32e3b6797bf2cd847a7aAffected
  • 6775ee7ef4b37c521aa4cf3730f54554c4875542Affected
  • 6.1.29 to before 6.1.57Affected
  • 6.2.16 to before 6.3Affected
  • 6.3.2 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.1.57 through 6.1.*Not affected
  • 6.5.7 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.