CVE-2023-53794

cifs: fix session state check in reconnect to avoid use-after-free issue

State: Published
Severity: 9.8 Critical
Published: Dec 9, 2025
Updated: Oct 15, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix session state check in reconnect to avoid use-after-free issue

Don't collect exiting session in smb2_reconnect_server(), because it will be released soon.

Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to before 7e4f5c3f01fb0e51ca438e43262d858daf9a0a76Affected 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to before 759ffc164d95a32c09528766d74d9b4fb054e8f4Affected 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to before 99f280700b4cc02d5f141b8d15f8e9fad0418f65Affected 655e0c067f0e02ece03fd0591dabe3db2ae27552Affected 875cc09c0767a4ac06b57af383709657f98b3ea1Affected 599fe1409085059ba12a2c3897c853be9fa9e7cfAffected 2e4378ee60049b752c9dce16f62ce6fbd11b379aAffected 59b520454b323ec43b2ae757217332cea33091e0Affected e20c888e2b3576e5f498c167729d274ef60b86f8Affected 4ce7aa4e44d88ce64ea8ae2337b8910f3670b0baAffected 419fad68e4c4135ff9859e9214dd6cf954413ca1Affected 3.10.103 to before 3.11Affected 3.12.63 to before 3.13Affected 3.14.74 to before 3.15Affected 3.16.37 to before 3.17Affected 3.18.37 to before 3.19Affected 4.1.28 to before 4.2Affected 4.4.16 to before 4.5Affected 4.6.5 to before 4.7Affected
LinuxLinux	4.7Affected before 4.7Not affected 6.1.47 through 6.1.Not affected 6.4.12 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to before 7e4f5c3f01fb0e51ca438e43262d858daf9a0a76Affected
4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to before 759ffc164d95a32c09528766d74d9b4fb054e8f4Affected
4fcd1813e6404dd4420c7d12fb483f9320f0bf93 to before 99f280700b4cc02d5f141b8d15f8e9fad0418f65Affected
655e0c067f0e02ece03fd0591dabe3db2ae27552Affected
875cc09c0767a4ac06b57af383709657f98b3ea1Affected
599fe1409085059ba12a2c3897c853be9fa9e7cfAffected
2e4378ee60049b752c9dce16f62ce6fbd11b379aAffected
59b520454b323ec43b2ae757217332cea33091e0Affected
e20c888e2b3576e5f498c167729d274ef60b86f8Affected
4ce7aa4e44d88ce64ea8ae2337b8910f3670b0baAffected
419fad68e4c4135ff9859e9214dd6cf954413ca1Affected
3.10.103 to before 3.11Affected
3.12.63 to before 3.13Affected
3.14.74 to before 3.15Affected
3.16.37 to before 3.17Affected
3.18.37 to before 3.19Affected
4.1.28 to before 4.2Affected
4.4.16 to before 4.5Affected
4.6.5 to before 4.7Affected

LinuxLinux

4.7Affected
before 4.7Not affected
6.1.47 through 6.1.*Not affected
6.4.12 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.