CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show()

Published May 21, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix use-after-free bug in cifsdebugdataprocshow()

Skip SMB sessions that are being teared down (e.g. @ses->sesstatus == SESEXITING) in cifsdebugdataprocshow() to avoid use-after-free in @ses.

This fixes the following GPF when reading from /proc/fs/cifs/DebugData while mounting and umounting

[ 816.251274] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6d81: 0000 [#1] PREEMPT SMP NOPTI ... [ 816.260138] Call Trace: [ 816.260329] <TASK> [ 816.260499] ? dieaddr+0x36/0x90 [ 816.260762] ? excgeneralprotection+0x1b3/0x410 [ 816.261126] ? asmexcgeneralprotection+0x26/0x30 [ 816.261502] ? cifsdebugtcon+0xbd/0x240 [cifs] [ 816.261878] ? cifsdebugtcon+0xab/0x240 [cifs] [ 816.262249] cifsdebugdataprocshow+0x516/0xdb0 [cifs] [ 816.262689] ? seqreaditer+0x379/0x470 [ 816.262995] seqreaditer+0x118/0x470 [ 816.263291] procregreaditer+0x53/0x90 [ 816.263596] ? srsoaliasreturnthunk+0x5/0x7f [ 816.263945] vfsread+0x201/0x350 [ 816.264211] ksysread+0x75/0x100 [ 816.264472] dosyscall64+0x3f/0x90 [ 816.264750] entrySYSCALL64afterhwframe+0x6e/0xd8 [ 816.265135] RIP: 0033:0x7fd5e669d381

Affected Software

179 affected componentsFixes available

Linux Linux kernel<6.1.64

Linux Linux kernel>=6.2<6.5.13

Linux Linux kernel>=6.6<6.6.3

debian/linux<=5.10.223-1, <=5.10.234-1

6.1.129-16.1.135-16.12.22-16.12.25-1

Debian Debian Linux=11.0

Linux Linux kernel<5.10.237

Linux Linux kernel>=5.11<5.15.181

Linux Linux kernel>=5.16<6.1.64

Microsoft cbl2 kernel 5.15.167.1-2

Patch available

ubuntu/linux-aws<4.4.0-1134.140

4.4.0-1134.140

ubuntu/linux-azure<4.15.0-1179.194~14.04.1

4.15.0-1179.194~14.04.1

ubuntu/linux-lts-xenial<4.4.0-257.291~14.04.1

4.4.0-257.291~14.04.1

ubuntu/linux*

ubuntu/linux<4.4.0-257.291

4.4.0-257.291

ubuntu/linux-aws<4.4.0-1172.187

4.4.0-1172.187

ubuntu/linux-aws-hwe<4.15.0-1170.183~16.04.1

4.15.0-1170.183~16.04.1

ubuntu/linux-azure<4.15.0-1179.194~16.04.1

4.15.0-1179.194~16.04.1

ubuntu/linux-gcp<4.15.0-1164.181~16.04.1

4.15.0-1164.181~16.04.1

ubuntu/linux-hwe<4.15.0-227.239~16.04.1

4.15.0-227.239~16.04.1

ubuntu/linux-kvm<4.4.0-1135.145

4.4.0-1135.145

ubuntu/linux-oracle<4.15.0-1133.144~16.04.1

4.15.0-1133.144~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1103.110

4.4.0-1103.110

ubuntu/linux-fips*

ubuntu/linux<4.15.0-227.239

4.15.0-227.239

ubuntu/linux-aws<4.15.0-1170.183

4.15.0-1170.183

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1130.140~18.04.1

5.4.0-1130.140~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1179.194

4.15.0-1179.194

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1135.142~18.04.1

5.4.0-1135.142~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1164.181

4.15.0-1164.181

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1134.143~18.04.1

5.4.0-1134.143~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-192.212~18.04.1

5.4.0-192.212~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1077.82~18.04.1

5.4.0-1077.82~18.04.1

ubuntu/linux-kvm<4.15.0-1154.159

4.15.0-1154.159

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1133.144

4.15.0-1133.144

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1129.138~18.04.1

5.4.0-1129.138~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1114.126~18.04.1

5.4.0-1114.126~18.04.1

ubuntu/linux-aws-fips<4.15.0-2109.115

4.15.0-2109.115

ubuntu/linux-azure-fips<4.15.0-2088.94

4.15.0-2088.94

ubuntu/linux-fips<4.15.0-1125.136

4.15.0-1125.136

ubuntu/linux-gcp-fips<4.15.0-2072.77

4.15.0-2072.77

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-192.212

5.4.0-192.212

ubuntu/linux-aws<5.4.0-1130.140

5.4.0-1130.140

ubuntu/linux-aws-5.15<5.15.0-1066.72~20.04.1

5.15.0-1066.72~20.04.1

ubuntu/linux-azure<5.4.0-1135.142

5.4.0-1135.142

ubuntu/linux-azure-5.15<5.15.0-1070.79~20.04.1

5.15.0-1070.79~20.04.1

ubuntu/linux-bluefield<5.4.0-1090.97

5.4.0-1090.97

ubuntu/linux-gcp<5.4.0-1134.143

5.4.0-1134.143

ubuntu/linux-gcp-5.15<5.15.0-1065.73~20.04.1

5.15.0-1065.73~20.04.1

ubuntu/linux-gkeop<5.4.0-1097.101

5.4.0-1097.101

ubuntu/linux-gkeop-5.15<5.15.0-1049.56~20.04.1

5.15.0-1049.56~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-117.127~20.04.1

5.15.0-117.127~20.04.1

ubuntu/linux-ibm<5.4.0-1077.82

5.4.0-1077.82

ubuntu/linux-ibm-5.15<5.15.0-1059.62~20.04.1

5.15.0-1059.62~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1061.67~20.04.1

5.15.0-1061.67~20.04.1

ubuntu/linux-iot<5.4.0-1042.43

5.4.0-1042.43

ubuntu/linux-kvm<5.4.0-1118.125

5.4.0-1118.125

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-117.127~20.04.1

5.15.0-117.127~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1027.27~20.04.1

5.15.0-1027.27~20.04.1

ubuntu/linux-oracle<5.4.0-1129.138

5.4.0-1129.138

ubuntu/linux-oracle-5.15<5.15.0-1065.71~20.04.1

5.15.0-1065.71~20.04.1

ubuntu/linux-raspi<5.4.0-1114.126

5.4.0-1114.126

ubuntu/linux-riscv-5.15<5.15.0-1062.66~20.04.1

5.15.0-1062.66~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1049.53

5.4.0-1049.53

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1130.140+fips1

5.4.0-1130.140+fips1

ubuntu/linux-azure-fips<5.4.0-1135.142+fips1

5.4.0-1135.142+fips1

ubuntu/linux-fips<5.4.0-1104.114

5.4.0-1104.114

ubuntu/linux-gcp-fips<5.4.0-1134.143+fips1

5.4.0-1134.143+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-117.127

5.15.0-117.127

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1066.72

5.15.0-1066.72

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1070.79

5.15.0-1070.79

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1070.79.1

5.15.0-1070.79.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1065.73

5.15.0-1065.73

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1063.69

5.15.0-1063.69

ubuntu/linux-gkeop<5.15.0-1049.56

5.15.0-1049.56

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1059.62

5.15.0-1059.62

ubuntu/linux-intel-iotg<5.15.0-1061.67

5.15.0-1061.67

ubuntu/linux-kvm<5.15.0-1063.68

5.15.0-1063.68

ubuntu/linux-lowlatency<5.15.0-117.127

5.15.0-117.127

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1061.62

5.15.0-1061.62

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5<6.5.0-1014.14

6.5.0-1014.14

ubuntu/linux-nvidia-tegra<5.15.0-1027.27

5.15.0-1027.27

ubuntu/linux-nvidia-tegra-igx<5.15.0-1015.15

5.15.0-1015.15

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1064.70

5.15.0-1064.70

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1059.62

5.15.0-1059.62

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1035.39

5.15.0-1035.39

ubuntu/linux-bluefield<5.15.0-1048.50

5.15.0-1048.50

ubuntu/linux-intel-iot-realtime<5.15.0-1059.61

5.15.0-1059.61

ubuntu/linux-realtime<5.15.0-1067.75

5.15.0-1067.75

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1066.72+fips1

5.15.0-1066.72+fips1

ubuntu/linux-azure-fips<5.15.0-1070.79+fips1

5.15.0-1070.79+fips1

ubuntu/linux-fips<5.15.0-117.127+fips1

5.15.0-117.127+fips1

ubuntu/linux-gcp-fips<5.15.0-1065.73+fips1

5.15.0-1065.73+fips1

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1134.140
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1179.194~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-257.291~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-257.291
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1172.187
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1170.183~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1179.194~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1164.181~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-227.239~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1135.145
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1133.144~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1103.110
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-227.239
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1170.183
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1130.140~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1179.194
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.142~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1164.181
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-192.212~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1077.82~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1154.159
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1133.144
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.138~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1114.126~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2109.115
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2088.94
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1125.136
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2072.77
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-192.212
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1130.140
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.72~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.142
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1090.97
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.73~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1097.101
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.56~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-117.127~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1077.82
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1059.62~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1061.67~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1042.43
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1118.125
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-117.127~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.27~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.138
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1114.126
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.66~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1049.53
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1130.140+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.142+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.114
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-117.127
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.72
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.73
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.69
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.56
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1059.62
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1061.67
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.68
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-117.127
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1061.62
Upgrade
Upgrade ubuntu/linux-nvidia-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1014.14
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.27
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.70
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1059.62
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.39
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.50
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1059.61
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.75
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.72+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-117.127+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.73+fips1
Configuration
Update the SMB client code so that cifs_debug_data_proc_show() skips SMB sessions that are being teared down (e.g., when @ses->ses_status == SES_EXITING) to avoid a use-after-free/GPP when reading /proc/fs/cifs/DebugData during mounting and umounting.
Linux kernel SMB client (cifs) /proc/fs/cifs/DebugData Skip SMB sessions being torn down (ses_status == SES_EXITING) in cifs_debug_data_proc_show() = enabled

Event History

May 21, 2024

CVE Published

via MITRE·03:30 PM

Data Sourced

via MITRE·03:30 PM

DescriptionSeverity

Data Sourced

via OSV·04:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Sep 4, 2025

Data Sourced

via Microsoft·02:49 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·02:49 AM

Affected Software

Frequently Asked Questions

What is the severity of CVE-2023-52752?

CVE-2023-52752 has been rated as a high severity vulnerability due to the potential for use-after-free conditions in the Linux kernel.

How do I fix CVE-2023-52752?

To fix CVE-2023-52752, update your Linux kernel to versions 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.

Which versions of the Linux kernel are affected by CVE-2023-52752?

CVE-2023-52752 affects Linux kernel versions earlier than 6.1.64 and those in the ranges 6.2 to 6.5.13 and 6.6 to 6.6.3.

What components are involved in CVE-2023-52752?

CVE-2023-52752 involves the CIFS (Common Internet File System) client within the Linux kernel.

Is there a workaround for CVE-2023-52752?

There is no official workaround for CVE-2023-52752, therefore updating to a fixed version is recommended.

CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show()

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2023-52752?

How do I fix CVE-2023-52752?

Which versions of the Linux kernel are affected by CVE-2023-52752?

What components are involved in CVE-2023-52752?

Is there a workaround for CVE-2023-52752?

Company

Resources

Contact