CVE-2023-52480: ksmbd: fix race condition between session lookup and expire
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix race condition between session lookup and expire
Thread A + Thread B ksmbdsessionlookup | smb2sesssetup sess = xaload | | | xaerase(&conn->sessions, sess->id); | | ksmbdsessiondestroy(sess) --> kfree(sess) | // UAF! | sess->lastactive = jiffies | +
This patch add rwsem to fix race condition between ksmbdsessionlookup and ksmbdexpiresession.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52480?
CVE-2023-52480 is classified as a moderate severity vulnerability due to its impact on session management in the Linux kernel.
How do I fix CVE-2023-52480?
To fix CVE-2023-52480, update to the recommended Linux kernel versions, specifically 5.10.223-1, 6.1.123-1, or higher.
Which versions of the Linux kernel are affected by CVE-2023-52480?
CVE-2023-52480 affects Linux kernel versions from 5.15 to 6.6-rc4.
What type of vulnerability is CVE-2023-52480?
CVE-2023-52480 is a race condition vulnerability that occurs between session lookup and expiration in the ksmbd module.
Is there a known exploit for CVE-2023-52480?
As of now, there are no publicly known exploits specifically targeting CVE-2023-52480.