CVE-2023-53751
published 2025-12-08CVE-2023-53751: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname…
PriorityP345critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.41%
35.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
TCP_Server_Info::hostname may be updated once or many times during
reconnect, so protect its access outside reconnect path as well and
then prevent any potential use-after-free bugs.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 93d5cb517db39e8af8d1292f9e785e4983b7f708 < 64d62ac6d6514cba1305bd08e271ec1843bdd612 | 64d62ac6d6514cba1305bd08e271ec1843bdd612 |
| linux | linux | >= 93d5cb517db39e8af8d1292f9e785e4983b7f708 < c511954bf142fe1995aec3c739a9f1a76990283a | c511954bf142fe1995aec3c739a9f1a76990283a |
| linux | linux | >= 93d5cb517db39e8af8d1292f9e785e4983b7f708 < 0b08c4c499200be67d54c439d56e5ea866869945 | 0b08c4c499200be67d54c439d56e5ea866869945 |
| linux | linux | >= 93d5cb517db39e8af8d1292f9e785e4983b7f708 < 90c49fce1c43e1cc152695e20363ff5087897c09 | 90c49fce1c43e1cc152695e20363ff5087897c09 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 5.0.0 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 6.2.0 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3.0 < 6.3.2 | 6.3.2 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.1.27/6.2.14/6.3.1 cifs hostname use after free (EUVD-2023-60077 / Nessus ID 297065)
vuldb·2026-09-29·CVSS 9.8
CVE-2023-53751 [CRITICAL] Linux Kernel up to 6.1.27/6.2.14/6.3.1 cifs hostname use after free (EUVD-2023-60077 / Nessus ID 297065)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.27/6.2.14/6.3.1. This affects the function TCP_Server_Info::hostname of the component cifs. The manipulation leads to use after free.
This vulnerability is uniquely identified as CVE-2023-53751. The attack can only be initiated within the local network. No exploit exists.
It is advisable to upgrade the affected component.
GHSA
GHSA-7gp2-6wc7-fw9f: In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
TCP_Server_
ghsa_unreviewed·2025-12-08
CVE-2023-53751 GHSA-7gp2-6wc7-fw9f: In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
TCP_Server_
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
TCP_Server_Info::hostname may be updated once or many times during
reconnect, so protect its access outside reconnect path as well and
then prevent any potential use-after-free bugs.
OSV
CVE-2023-53751: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_In
osv·2025-12-08
CVE-2023-53751 CVE-2023-53751: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_In
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.
OSV
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
osv·2025-12-08
CVE-2023-53751 cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
TCP_Server_Info::hostname may be updated once or many times during
reconnect, so protect its access outside reconnect path as well and
then prevent any potential use-after-free bugs.
Red Hat
kernel: Linux kernel (CIFS): Use-after-free vulnerability allows data integrity compromise and denial of service
vendor_redhat·2025-12-08·CVSS 7.1
CVE-2023-53751 [MEDIUM] CWE-825 kernel: Linux kernel (CIFS): Use-after-free vulnerability allows data integrity compromise and denial of service
kernel: Linux kernel (CIFS): Use-after-free vulnerability allows data integrity compromise and denial of service
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
TCP_Server_Info::hostname may be updated once or many times during
reconnect, so protect its access outside reconnect path as well and
then prevent any potential use-after-free bugs.
A flaw was found in the Linux kernel's Common Internet File System (CIFS) component. This use-after-free vulnerability occurs due to improper handling of server hostname information during connection re-establishment. An attacker on an adjacent network could exploit this, potentially leading to a compromise of data integrity or a denial of service.
Statement: Th
Debian
CVE-2023-53751: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: fix p...
vendor_debian·2023
CVE-2023-53751 CVE-2023-53751: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: fix p...
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: open
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
No detection rules found.
No public exploits indexed.
2025-12-08
Published