Riskcovery

CVE-2023-53358

ksmbd: fix racy issue under cocurrent smb2 tree disconnect

State
Published
Severity
8.8 High
Published
Sep 17, 2025
Updated
Aug 5, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix racy issue under cocurrent smb2 tree disconnect

There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent access.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before b36295c17fb97424406f0c3ab321b1ccaabb9be8Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before dc1c17716c099c90948ebb83e2170dd75a3be6b6Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 39366b47a59d46af15ac57beb0996268bf911f6aAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 30210947a343b6b3ca13adc9bfc88e1543e16dd5Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.145 through 5.15.*Not affected
  • 6.1.28 through 6.1.*Not affected
  • 6.2.15 through 6.2.*Not affected
  • 6.3.2 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.