CVE-2023-53794
published 2025-12-09CVE-2023-53794: In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect…
PriorityP348critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.51%
43.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix session state check in reconnect to avoid use-after-free issue
Don't collect exiting session in smb2_reconnect_server(), because it
will be released soon.
Note that the exiting session will stay in server->smb_ses_list until
it complete the cifs_free_ipc() and logoff() and then delete itself
from the list.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 3.10.103 < 3.11 | 3.11 |
| linux | linux | >= 3.12.63 < 3.13 | 3.13 |
| linux | linux | >= 3.14.74 < 3.15 | 3.15 |
| linux | linux | >= 3.16.37 < 3.17 | 3.17 |
| linux | linux | >= 3.18.37 < 3.19 | 3.19 |
| linux | linux | >= 4.1.28 < 4.2 | 4.2 |
| linux | linux | >= 4.4.16 < 4.5 | 4.5 |
| linux | linux | >= 4.6.5 < 4.7 | 4.7 |
| linux | linux | >= 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 < 7e4f5c3f01fb0e51ca438e43262d858daf9a0a76 | 7e4f5c3f01fb0e51ca438e43262d858daf9a0a76 |
| linux | linux | >= 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 < 759ffc164d95a32c09528766d74d9b4fb054e8f4 | 759ffc164d95a32c09528766d74d9b4fb054e8f4 |
| linux | linux | >= 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 < 99f280700b4cc02d5f141b8d15f8e9fad0418f65 | 99f280700b4cc02d5f141b8d15f8e9fad0418f65 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.13-1 | 6.4.13-1 |
| linux | linux_kernel | >= 0 < 6.4.13-1 | 6.4.13-1 |
| linux | linux_kernel | >= 4.7.0 < 6.1.47 | 6.1.47 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: cifs: fix session state check in reconnect to avoid use-after-free issue
vendor_redhat·2025-12-09·CVSS 4.7
CVE-2023-53794 [MEDIUM] CWE-416 kernel: cifs: fix session state check in reconnect to avoid use-after-free issue
kernel: cifs: fix session state check in reconnect to avoid use-after-free issue
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix session state check in reconnect to avoid use-after-free issue
Don't collect exiting session in smb2_reconnect_server(), because it
will be released soon.
Note that the exiting session will stay in server->smb_ses_list until
it complete the cifs_free_ipc() and logoff() and then delete itself
from the list.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Affected
Package: kernel-rt (Red Ha
Debian
CVE-2023-53794: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: fix s...
vendor_debian·2023
CVE-2023-53794 CVE-2023-53794: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: fix s...
In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: open
forky: resolved (fixed in 6.4.13-1)
sid: resolved (fixed in 6.4.13-1)
trixie: resolved (fixed in 6.4.13-1)
OSV
cifs: fix session state check in reconnect to avoid use-after-free issue
osv·2025-12-09
CVE-2023-53794 cifs: fix session state check in reconnect to avoid use-after-free issue
cifs: fix session state check in reconnect to avoid use-after-free issue
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix session state check in reconnect to avoid use-after-free issue
Don't collect exiting session in smb2_reconnect_server(), because it
will be released soon.
Note that the exiting session will stay in server->smb_ses_list until
it complete the cifs_free_ipc() and logoff() and then delete itself
from the list.
OSV
CVE-2023-53794: In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't col
osv·2025-12-09
CVE-2023-53794 CVE-2023-53794: In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't col
In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.
GHSA
GHSA-x47f-6fjp-7wj4: In the Linux kernel, the following vulnerability has been resolved:
cifs: fix session state check in reconnect to avoid use-after-free issue
Don't c
ghsa_unreviewed·2025-12-09
CVE-2023-53794 GHSA-x47f-6fjp-7wj4: In the Linux kernel, the following vulnerability has been resolved:
cifs: fix session state check in reconnect to avoid use-after-free issue
Don't c
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix session state check in reconnect to avoid use-after-free issue
Don't collect exiting session in smb2_reconnect_server(), because it
will be released soon.
Note that the exiting session will stay in server->smb_ses_list until
it complete the cifs_free_ipc() and logoff() and then delete itself
from the list.
No detection rules found.
No public exploits indexed.
2025-12-09
Published