CVE-2023-53751

CriticalCVSS 9.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname

TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 93d5cb517db39e8af8d1292f9e785e4983b7f708, < 64d62ac6d6514cba1305bd08e271ec1843bdd612; >= 93d5cb517db39e8af8d1292f9e785e4983b7f708, < c511954bf142fe1995aec3c739a9f1a76990283a; >= 93d5cb517db39e8af8d1292f9e785e4983b7f708, < 0b08c4c499200be67d54c439d56e5ea866869945; >= 93d5cb517db39e8af8d1292f9e785e4983b7f708, < 90c49fce1c43e1cc152695e20363ff5087897c09
LinuxLinux5.0

References

Timeline

Published
Dec 8, 2025
Last modified
Aug 4, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-537527.8In the Linux kernel, the following vulnerability has been resolved: net: deal with integer overflows in kmalloc_reserve() Blamed commit chCVE-2023-537537.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix mapping to non-allocated address [Why] There is aCVE-2023-53754In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() When if_tyCVE-2023-53755In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: check for null desc before calling pt_cmd_callback RCVE-2023-53756In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized current_vmcs KVM enables 'EnlCVE-2023-53757In the Linux kernel, the following vulnerability has been resolved: irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe of_irq_fCVE-2023-53758In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .reCVE-2023-537597.8In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix data race on device refcount The hidraw_open() functiCVE-2023-53769.1An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than fCVE-2023-53760In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: mcq: Fix &hwq->cq_lock deadlock issue When ufshcd_errCVE-2023-53761In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzCVE-2023-537628.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync Use-after-free
CVE-2023-53751: Critical severity, CVSS 9.8 | Vulnix