Riskcovery

CVE-2023-52757

smb: client: fix potential deadlock when releasing mids

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 23, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential deadlock when releasing mids

All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways.

By getting rid of such spinlock also fixes a potential deadlock as shown below

CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock*

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7b71843fa7028475b052107664cbe120156a2cfc to before 99f476e27aad5964ab13777d84fda67d1356dec1Affected
  • 7b71843fa7028475b052107664cbe120156a2cfc to before ce49569079a9d4cad26c0f1d4653382fd9a5ca7aAffected
  • 7b71843fa7028475b052107664cbe120156a2cfc to before 9eb44db68c5b7f5aa22b8fc7de74a3e2e08d1f29Affected
  • 7b71843fa7028475b052107664cbe120156a2cfc to before b9bb9607b1fc12fca51f5632da25b36975f599bfAffected
  • 7b71843fa7028475b052107664cbe120156a2cfc to before c1a5962f1462b64fe7b69f20a4b6af8067bc2d26Affected
  • 7b71843fa7028475b052107664cbe120156a2cfc to before e6322fd177c6885a21dd4609dc5e5c973d1a2eb7Affected
  • 9871dea42034ee6e73bb2b97ba0284d3d462b230Affected
  • 5.4.6 to before 5.5Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.64 through 6.1.*Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.