CVE-2023-52479: ksmbd: fix uaf in smb20_oplock_break_ack
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix uaf in smb20oplockbreakack
drop reference after use opinfo.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52479?
CVE-2023-52479 has a medium severity rating due to the potential for unauthorized access via a use-after-free condition in the Linux kernel.
How do I fix CVE-2023-52479?
To fix CVE-2023-52479, update to the latest stable version of the Linux kernel that includes the patches addressing this vulnerability.
What causes CVE-2023-52479?
CVE-2023-52479 is caused by a use-after-free bug in the ksmbd component of the Linux kernel, specifically during the handling of SMB2 oplock break acknowledgments.
What systems are affected by CVE-2023-52479?
CVE-2023-52479 affects systems running vulnerable versions of the Linux kernel that utilize the ksmbd file server.
Is CVE-2023-52479 exploitable remotely?
Yes, CVE-2023-52479 is potentially exploitable remotely if the ksmbd server is enabled and accessible over the network.