CVE-2023-52757

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential deadlock when releasing mids in the smb client. All release mid() callers seem to hold a reference of @mid, so there is no need to call kref put(&mid->refcount, release mid) under @server->mid lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock, it also fixes a potential deadlock as shown in the scenario involving cifs demultiplex thread() and cifs debug data proc show().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.