CVE-2023-53006: cifs: Fix oops due to uncleared server->smbd_conn in reconnect
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix oops due to uncleared server->smbdconn in reconnect
In smbddestroy(), clear the server->smbdconn pointer after freeing the smbdconnection struct that it points to so that reconnection doesn't get confused.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Patch smbd_destroy() to free the smbd_connection and then set server->smbd_conn to NULL so that reconnect does not reuse an uncleared pointer (fixes the oops due to uncleared server->smbd_conn in reconnect).
Linux kernel CIFS In smbd_destroy(), clear server->smbd_conn after freeing the smbd_connection it points to = server->smbd_conn = NULL
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53006?
CVE-2023-53006 is categorized as a medium severity vulnerability.
How do I fix CVE-2023-53006?
To resolve CVE-2023-53006, update to the latest version of the Linux kernel where the vulnerability has been addressed.
What does CVE-2023-53006 affect?
CVE-2023-53006 affects the Linux kernel, specifically related to the CIFS subsystem.
What are the implications of CVE-2023-53006?
The implications of CVE-2023-53006 include potential system instability due to improper handling of server connections.
Who is affected by CVE-2023-53006?
All users and systems running vulnerable versions of the Linux kernel using CIFS are affected by CVE-2023-53006.