CVE-2023-52480

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-52480
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52480.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-52480
Downstream
Published
2024-02-29T05:43:12.019Z
Modified
2026-03-14T12:23:12.495733Z
Summary
ksmbd: fix race condition between session lookup and expire
Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix race condition between session lookup and expire

Thread A + Thread B ksmbdsessionlookup | smb2sesssetup sess = xaload | | | xaerase(&conn->sessions, sess->id); | | ksmbdsessiondestroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | +

This patch add rwsem to fix race condition between ksmbdsessionlookup and ksmbdexpiresession.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52480.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0626e6641f6b467447c81dd7678a69c66f7746cf
Fixed
c77fd3e25a51ac92b0f1b347a96eff6a0b4f066f
Fixed
a2ca5fd3dbcc665e1169044fa0c9e3eba779202b
Fixed
18ced78b0ebccc2d16f426143dc56ab3aad666be
Fixed
53ff5cf89142b978b1a5ca8dc4d4425e6a09745f

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52480.json"