Riskcovery

CVE-2023-54076

smb: client: fix missed ses refcounting

State
Published
Severity
9.8 Critical
Published
Dec 24, 2025
Updated
Aug 5, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix missed ses refcounting

Use new cifs_smb_ses_inc_refcount() helper to get an active reference of @ses and @ses->dfs_root_ses (if set). This will prevent @ses->dfs_root_ses of being put in the next call to cifs_put_smb_ses() and thus potentially causing an use-after-free bug.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8e3554150d6c80a84b3cb046615d1a0e943811dc to before eb382196e6f6e05cfafdab797840e5a96c6e7bf0Affected
  • 8e3554150d6c80a84b3cb046615d1a0e943811dc to before bf99f6be2d20146942bce6f9e90a0ceef12cbc1eAffected
  • f30d226bcc9f0e2d97b4a6e94c43a28148fbeab6Affected
  • c082c3be0f96e759ff2e361d929832fda0b93851Affected
  • 6.2.15 to before 6.3Affected
  • 6.3.2 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.4.7 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.