Riskcovery

CVE-2023-53751

cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname

State
Published
Severity
9.8 Critical
Published
Dec 8, 2025
Updated
Aug 5, 2026
Reserved
Dec 8, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname

TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 93d5cb517db39e8af8d1292f9e785e4983b7f708 to before 64d62ac6d6514cba1305bd08e271ec1843bdd612Affected
  • 93d5cb517db39e8af8d1292f9e785e4983b7f708 to before c511954bf142fe1995aec3c739a9f1a76990283aAffected
  • 93d5cb517db39e8af8d1292f9e785e4983b7f708 to before 0b08c4c499200be67d54c439d56e5ea866869945Affected
  • 93d5cb517db39e8af8d1292f9e785e4983b7f708 to before 90c49fce1c43e1cc152695e20363ff5087897c09Affected
LinuxLinux
  • 5.0Affected
  • before 5.0Not affected
  • 6.1.28 through 6.1.*Not affected
  • 6.2.15 through 6.2.*Not affected
  • 6.3.2 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.