CVE-2023-52757: smb: client: fix potential deadlock when releasing mids
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential deadlock when releasing mids
All releasemid() callers seem to hold a reference of @mid so there is no need to call krefput(&mid->refcount, releasemid) under @server->midlock spinlock. If they don't, then an use-after-free bug would have occurred anyways.
By getting rid of such spinlock also fixes a potential deadlock as shown below
CPU 0 CPU 1 ------------------------------------------------------------------ cifsdemultiplexthread() cifsdebugdataprocshow() releasemid() spinlock(&server->midlock); spinlock(&cifstcpseslock) spinlock(&server->midlock) releasemid() smb2findsmbtcon() spinlock(&cifstcpseslock) deadlock
Other sources
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential deadlock when releasing mids
The Linux kernel CVE team has assigned CVE-2023-52757 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052146-CVE-2023-52757-5028@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.64 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.5.13 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.3 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.182.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52757?
The severity of CVE-2023-52757 is categorized as moderate.
How do I fix CVE-2023-52757?
To fix CVE-2023-52757, update to kernel version 6.1.64 or later for Red Hat, or the corresponding patched version for Debian.
Which systems are affected by CVE-2023-52757?
CVE-2023-52757 affects specific versions of the Linux kernel up to 6.1.64, 6.5.13, 6.6.3, and 6.7.
Is there a specific kernel patch for CVE-2023-52757?
Yes, the fix for CVE-2023-52757 is included in the kernel updates mentioned in the vulnerability report.
What impact does CVE-2023-52757 have on Linux systems?
CVE-2023-52757 could potentially lead to a deadlock in certain SMB client operations, affecting system stability.