CVE-2023-53358CWE-416

CVE-2023-53358

High · published September 17, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix racy issue under cocurrent smb2 tree disconnect

There is UAF issue under cocurrent smb2 tree disconnect.

This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent

access.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.1th percentile
Weakness
CWE-416 · Use After Free
Published
2025-09-17T19:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.1455.15.145
linux/linux_kernel≥ 5.16, < 6.1.286.1.28
linux/linux_kernel≥ 6.2, < 6.2.156.2.15
linux/linux_kernel≥ 6.3, < 6.3.26.3.2
References (5)
https://git.kernel.org/stable/c/30210947a343b6b3ca13adc9bfc88e1543e16dd5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/39366b47a59d46af15ac57beb0996268bf911f6a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b36295c17fb97424406f0c3ab321b1ccaabb9be8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dc1c17716c099c90948ebb83e2170dd75a3be6b6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 17 SEP 14:56Z
    ksmbd: fix racy issue under cocurrent smb2 tree disconnect
    cvelistv5