Back
CVE-2023-53006
cifs: Fix oops due to uncleared server->smbd_conn in reconnect
Critical9.8EPSS 0.55%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbd_destroy(), clear the server->smbd_conn pointer after freeing the smbd_connection struct that it points to so that reconnection doesn't get confused.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.55% · top 54% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Affected products
- affected 8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < a9640c0b268405f2540e8203a545e930ea88bb7d
- affected 8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < 91be54849d5392050f5b847b42bd5e6221551ac8
- affected 8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < e037baee16e0b9ace7e730888fcae9cec11daff2
- affected 8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < 4b83bc6f87eedab4599b0123e572a422689444be
- affected 8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < 5109607a4ece7cd8536172bf7549eb4dce1f3576
- affected 8ef130f9ec27973f7b49e20c5a3b9134ca33026c – < b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7
- affected 4.16
- unaffected < 4.16
- unaffected 4.19.272 – ≤ 4.19.*
- unaffected 5.4.231 – ≤ 5.4.*
- unaffected 5.10.166 – ≤ 5.10.*
- unaffected 5.15.91 – ≤ 5.15.*
- unaffected 6.1.9 – ≤ 6.1.*
- unaffected 6.2 – ≤ *
References (6)
- https://git.kernel.org/stable/c/a9640c0b268405f2540e8203a545e930ea88bb7d (opens in a new tab)
- https://git.kernel.org/stable/c/91be54849d5392050f5b847b42bd5e6221551ac8 (opens in a new tab)
- https://git.kernel.org/stable/c/e037baee16e0b9ace7e730888fcae9cec11daff2 (opens in a new tab)
- https://git.kernel.org/stable/c/4b83bc6f87eedab4599b0123e572a422689444be (opens in a new tab)
- https://git.kernel.org/stable/c/5109607a4ece7cd8536172bf7549eb4dce1f3576 (opens in a new tab)
- https://git.kernel.org/stable/c/b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53006)Record last updated .