CVE-2023-53427 — Use After Free in Linux

CWE-416 — Use After Free5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 95.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 18

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery work not initialized and list not cleared. Then will be warning and UAF when release the MR: WARNING: CPU: 4 PID: 824 at kernel/workqueue.c:3066 __flush_work.isra.0+0xf7/0x110 CPU: 4 PID: 824 Comm: mount.cifs Not tainted 6.1.0-rc5+ #82 RIP: 0010:__flush_work.isra.0+0xf7/0x110 Call Trace: __cancel_work_timer+0x2ba/0x2e0 smbd_destroy+…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDlinux/linux_kernel4.16 — 4.19.276+5
▶Debianlinux/linux_kernel< 5.10.178-1+3
▶CVEListV5linux/linuxc7398583340a6d82b8bb7f7f21edcde27dc6a898 — 275a3d2b9408fc4895e342f772cab9a89960546e+7
▶debiandebian/linux< linux 6.1.20-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-v584-qp6m-f4mf: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, th↗2025-09-18
▶
OSV
CVE-2023-53427: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the↗2025-09-18
▶

📋Vendor Advisories

2
Red Hat
kernel: cifs: Fix warning and UAF when destroy the MR list↗2025-09-18
▶
Debian
CVE-2023-53427: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix w...↗2023
▶
CVE-2023-53427 — Use After Free in Linux | cvebase