Back
CVE-2023-53751
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
Critical9.8EPSS 0.41%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.41% · top 64% of all CVEs (5 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Affected products
- affected 93d5cb517db39e8af8d1292f9e785e4983b7f708 – < 64d62ac6d6514cba1305bd08e271ec1843bdd612
- affected 93d5cb517db39e8af8d1292f9e785e4983b7f708 – < c511954bf142fe1995aec3c739a9f1a76990283a
- affected 93d5cb517db39e8af8d1292f9e785e4983b7f708 – < 0b08c4c499200be67d54c439d56e5ea866869945
- affected 93d5cb517db39e8af8d1292f9e785e4983b7f708 – < 90c49fce1c43e1cc152695e20363ff5087897c09
- affected 5.0
- unaffected < 5.0
- unaffected 6.1.28 – ≤ 6.1.*
- unaffected 6.2.15 – ≤ 6.2.*
- unaffected 6.3.2 – ≤ 6.3.*
- unaffected 6.4 – ≤ *
References (4)
- https://git.kernel.org/stable/c/64d62ac6d6514cba1305bd08e271ec1843bdd612 (opens in a new tab)
- https://git.kernel.org/stable/c/c511954bf142fe1995aec3c739a9f1a76990283a (opens in a new tab)
- https://git.kernel.org/stable/c/0b08c4c499200be67d54c439d56e5ea866869945 (opens in a new tab)
- https://git.kernel.org/stable/c/90c49fce1c43e1cc152695e20363ff5087897c09 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53751)Record last updated .