← CVE Intelligence

CVE-2023-53358

ksmbd: fix racy issue under cocurrent smb2 tree disconnect PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent access.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 0626e6641f6b467447c81dd7678a69c66f7746cf before b36295c17fb97424406f0c3ab321b1ccaabb9be8; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before dc1c17716c099c90948ebb83e2170dd75a3be6b6; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 39366b47a59d46af15ac57beb0996268bf911f6a; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 30210947a343b6b3ca13adc9bfc88e1543e16dd5
Linux / Linuxaffected 5.15; unaffected 0 before 5.15; unaffected 5.15.145 through 5.15.*; unaffected 6.1.28 through 6.1.*; unaffected 6.2.15 through 6.2.*; unaffected 6.3.2 through 6.3.*; unaffected 6.4 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.