CVE-2023-54076

CriticalCVSS 9.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix missed ses refcounting

Use new cifs_smb_ses_inc_refcount() helper to get an active reference of @ses and @ses->dfs_root_ses (if set). This will prevent @ses->dfs_root_ses of being put in the next call to cifs_put_smb_ses() and thus potentially causing an use-after-free bug.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 8e3554150d6c80a84b3cb046615d1a0e943811dc, < eb382196e6f6e05cfafdab797840e5a96c6e7bf0; >= 8e3554150d6c80a84b3cb046615d1a0e943811dc, < bf99f6be2d20146942bce6f9e90a0ceef12cbc1e; f30d226bcc9f0e2d97b4a6e94c43a28148fbeab6; c082c3be0f96e759ff2e361d929832fda0b93851; >= 6.2.15, < 6.3; >= 6.3.2, < 6.4
LinuxLinux6.4

References

Timeline

Published
Dec 24, 2025
Last modified
Aug 4, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-540777.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak if ntfs_read_mft failed Label ATTR_ROOT in nCVE-2023-54078In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in CVE-2023-540797.8In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix poll_interval handling and races on remove CVE-2023-54087.2A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker CVE-2023-54080In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write CVE-2023-54081In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use bCVE-2023-540837.8In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the duCVE-2023-54084In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-digi00x: prevent potential use after free This code wasCVE-2023-540857.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In caseCVE-2023-54086In the Linux kernel, the following vulnerability has been resolved: bpf: Add preempt_count_{sub,add} into btf id deny list The recursion cCVE-2023-54087In the Linux kernel, the following vulnerability has been resolved: ubi: Fix possible null-ptr-deref in ubi_free_volume() It willl cause nCVE-2023-540887.8In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: hold queue_lock when removing blkg->q_node When blkg is re
CVE-2023-54076: Critical severity, CVSS 9.8 | Vulnix