CVE-2023-54280

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists when tree connecting to the Inter-Process Communication (IPC). Access to TCP Server Info::hostname is not adequately protected when building the IPC tree name, potentially leading to a use-after-free issue in the tree connect dfs target() function. The status of the IPC transaction connection (tcon) is updated on success, preventing unnecessary additional tree connects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.