CVE-2023-54076 — Improper Update of Reference Count in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix missed ses refcounting
Use new cifs_smb_ses_inc_refcount() helper to get an active reference
of @ses and @ses->dfs_root_ses (if set). This will prevent
@ses->dfs_root_ses of being put in the next call to cifs_put_smb_ses()
and thus potentially causing an use-after-free bug.
Affected Packages4 packages
▶CVEListV5linux/linux8e3554150d6c80a84b3cb046615d1a0e943811dc — eb382196e6f6e05cfafdab797840e5a96c6e7bf0+4
🔴Vulnerability Details
3GHSA▶
GHSA-fm2q-hj9m-hx9r: In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix missed ses refcounting
Use new cifs_smb_ses_inc_refcount() help↗2025-12-24
OSV▶
CVE-2023-54076: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper↗2025-12-24