CVE-2023-52757

smb: client: fix potential deadlock when releasing mids

HIGH

7.8

CVSS Score

Published: May 21, 2024 at 03:30 PM UTC

Updated: June 17, 2026 at 06:43 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock*

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

v ≥ 5.4.6v < 5.10.2375.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.645.4.6 ≤ v < 5.55.5 ≤ v < 5.10.2375.5 ≤ v < 5.15.1815.5 ≤ v < 6.1.645.5 ≤ v < 6.5.135.5 ≤ v < 6.6.35.5 ≤ v < 6.76.2 ≤ v < 6.5.136.6 ≤ v < 6.6.35.4.6 5.57b71843fa7028475b052107664cbe120156a2cfc9871dea42034ee6e73bb2b97ba0284d3d462b230

Vendor states this is fixed in 99f476e27aad5964ab13777d84fda67d1356dec1 (fixed)

Vendor states this is fixed in 9eb44db68c5b7f5aa22b8fc7de74a3e2e08d1f29 (fixed)

Vendor states this is fixed in b9bb9607b1fc12fca51f5632da25b36975f599bf (fixed)

Vendor states this is fixed in c1a5962f1462b64fe7b69f20a4b6af8067bc2d26 (fixed)

Vendor states this is fixed in ce49569079a9d4cad26c0f1d4653382fd9a5ca7a (fixed)

Vendor states this is fixed in e6322fd177c6885a21dd4609dc5e5c973d1a2eb7 (fixed)

Vendor states this is fixed in 5.10.237 (unaffected)

Vendor states this is fixed in 5.15.181 (unaffected)

Vendor states this is fixed in 5.5 (unaffected)

Vendor states this is fixed in 6.1.64 (unaffected)

Vendor states this is fixed in 6.5.13 (unaffected)

Vendor states this is fixed in 6.6.3 (unaffected)