CVE-2023-53006

cifs: Fix oops due to uncleared server->smbd_conn in reconnect

MEDIUM
5.5
CVSS Score
Published: March 27, 2025 at 04:43 PM UTC
Updated: October 15, 2026 at 10:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.6%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbd_destroy(), clear the server->smbd_conn pointer after freeing the smbd_connection struct that it points to so that reconnection doesn't get confused.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.16 ≤ v < 4.19.2724.20 ≤ v < 5.4.2315.11 ≤ v < 5.15.915.16 ≤ v < 6.1.95.5 ≤ v < 5.10.1666.26.2 rc16.2 rc26.2 rc36.2 rc46.2 rc58ef130f9ec27973f7b49e20c5a3b9134ca33026c
Vendor states this is fixed in 4b83bc6f87eedab4599b0123e572a422689444be (fixed)
Vendor states this is fixed in 5109607a4ece7cd8536172bf7549eb4dce1f3576 (fixed)
Vendor states this is fixed in 91be54849d5392050f5b847b42bd5e6221551ac8 (fixed)
Vendor states this is fixed in a9640c0b268405f2540e8203a545e930ea88bb7d (fixed)
Vendor states this is fixed in b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7 (fixed)
Vendor states this is fixed in e037baee16e0b9ace7e730888fcae9cec11daff2 (fixed)
Vendor states this is fixed in 4.16 (unaffected)
Vendor states this is fixed in 4.19.272 (unaffected)
Vendor states this is fixed in 5.10.166 (unaffected)
Vendor states this is fixed in 5.15.91 (unaffected)
Vendor states this is fixed in 5.4.231 (unaffected)
Vendor states this is fixed in 6.1.9 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

References (6)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4b83bc6f87eedab4599b0123e572a422689444be
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5109607a4ece7cd8536172bf7549eb4dce1f3576
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/91be54849d5392050f5b847b42bd5e6221551ac8
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a9640c0b268405f2540e8203a545e930ea88bb7d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e037baee16e0b9ace7e730888fcae9cec11daff2

SSVC — Action Prioritization

SSVCNo known exploitAutomatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card