CVE-2023-53358

HighCVSS 7.0/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix racy issue under cocurrent smb2 tree disconnect

There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent access.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf, < b36295c17fb97424406f0c3ab321b1ccaabb9be8; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < dc1c17716c099c90948ebb83e2170dd75a3be6b6; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 39366b47a59d46af15ac57beb0996268bf911f6a; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 30210947a343b6b3ca13adc9bfc88e1543e16dd5
LinuxLinux5.15

References

Timeline

Published
Sep 17, 2025
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-533595.5In the Linux kernel, the following vulnerability has been resolved: USB: fix memory leak with using debugfs_lookup() When calling debugfs_CVE-2023-53366.5The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versionCVE-2023-533605.5In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: Rework scratch handling for READ_PLUS (again) I found that thCVE-2023-533615.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: mm: Add p?d_leaf() definitions When I do LTP test, LTP testCVE-2023-533625.5In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices ChangesCVE-2023-533637.8In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free in pci_bus_release_domain_nr() Commit c14f7cccCVE-2023-533645.5In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions CVE-2023-533655.5In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skb_under_panic in ip6mr_cache_report() skbuff: skb_under_pCVE-2023-533665.5In the Linux kernel, the following vulnerability has been resolved: block: be a bit more careful in checking for NULL bdev while polling WCVE-2023-533675.5In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: fix mem leak in capture user mappings This commit fiCVE-2023-533684.7In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race issue between cpu buffer write and swap Warning happCVE-2023-533695.5In the Linux kernel, the following vulnerability has been resolved: net: dcb: choose correct policy to parse DCB_ATTR_BCN The dcbnl_bcn_se
CVE-2023-53358: High severity, CVSS 7.0 | Vulnix