PT-2025-38446
CVE-2023-53427
·
Published
2022-11-18
·
Updated
2026-10-18
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc5+ #82
Description
A use-after-free (UAF) issue exists in the CIFS implementation of the Linux kernel. Specifically, the issue occurs when destroying the Message Response (MR) list. If MR allocation fails, the MR recovery work is not initialized and the list is not cleared, leading to a warning and a UAF condition upon release of the MR.
Recommendations
Update the Linux kernel to a version newer than 6.1.0-rc5+ #82 to resolve this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾