In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix UAF in cifsdemultiplexthread()
There is a UAF when xfstests on cifs:
BUG: KASAN: use-after-free in smb2isnetworknamedeleted+0x27/0x160 Read of size 4 at addr ffff88810103fc08 by task cifsd/923
CPU: 1 PID: 923 Comm: cifsd Not tainted 6.1.0-rc4+ #45 ... Call Trace: <TASK> dumpstacklvl+0x34/0x44 printreport+0x171/0x472 kasanreport+0xad/0x130 kasancheckrange+0x145/0x1a0 smb2isnetworknamedeleted+0x27/0x160 cifsdemultiplexthread.cold+0x172/0x5a4 kthread+0x165/0x1a0 retfromfork+0x1f/0x30 </TASK>
Allocated by task 923: kasansavestack+0x1e/0x40 kasansettrack+0x21/0x30 _kasanslaballoc+0x54/0x60 kmemcachealloc+0x147/0x320 mempoolalloc+0xe1/0x260 cifssmallbufget+0x24/0x60 allocatebuffers+0xa1/0x1c0 cifsdemultiplexthread+0x199/0x10d0 kthread+0x165/0x1a0 retfromfork+0x1f/0x30
Freed by task 921: kasansavestack+0x1e/0x40 kasansettrack+0x21/0x30 kasansavefreeinfo+0x2a/0x40 __kasanslabfree+0x143/0x1b0 kmemcachefree+0xe3/0x4d0 cifssmallbufrelease+0x29/0x90 SMB2negotiate+0x8b7/0x1c60 smb2negotiate+0x51/0x70 cifsnegotiateprotocol+0xf0/0x160 cifsgetsmbses+0x5fa/0x13c0 mountgetconns+0x7a/0x750 cifsmount+0x103/0xd00 cifssmb3domount+0x1dd/0xcb0 smb3gettree+0x1d5/0x300 vfsgettree+0x41/0xf0 pathmount+0x9b3/0xdd0 _x64sysmount+0x190/0x1d0 dosyscall64+0x35/0x80 entrySYSCALL64after_hwframe+0x46/0xb0
The UAF is because:
mount(pid: 921) | cifsd(pid: 923) -------------------------------|------------------------------- | cifsdemultiplexthread SMB2negotiate | cifssendrecv | compoundsendrecv | smbsendrqst | waitforresponse | waiteventstate [1] | | standardreceive3 | cifshandlestandard | handlemid | mid->respbuf = buf; [2] | dequeuemid [3] KILL the process [4] | respiov[i].iovbase = buf | freerspbuf [5] | | isnetworknamedeleted [6] | callback
It can be easily reproduce with add some delay in [3] - [6].
Only sync call has the problem since async call's callback is executed in cifsd process.
Add an extra state to mark the mid state to READY before wakeup the waitter, then it can get the resp safely.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-05f9dc28",
"deprecated": false,
"target": {
"function": "cifs_wake_up_task",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 74.0,
"function_hash": "294520042585078727605537488095868788767"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-0790f4a0",
"deprecated": false,
"target": {
"function": "__release_mid",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1966.0,
"function_hash": "32381625669649903645881196892226886861"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-0b22bca4",
"deprecated": false,
"target": {
"function": "compound_send_recv",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 4298.0,
"function_hash": "47487349146872579211739864649227977518"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-0cf4ee76",
"deprecated": false,
"target": {
"function": "cifs_sync_mid_result",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 830.0,
"function_hash": "194865557353650770686665071019479982187"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-0f524d1e",
"deprecated": false,
"target": {
"function": "cifs_sync_mid_result",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 830.0,
"function_hash": "194865557353650770686665071019479982187"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-10279d04",
"deprecated": false,
"target": {
"function": "wait_for_response",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 251.0,
"function_hash": "218442219753944894432663366639675517272"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-11673804",
"deprecated": false,
"target": {
"function": "SendReceiveBlockingLock",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2685.0,
"function_hash": "246869299510397202655144900459385586049"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-17878301",
"deprecated": false,
"target": {
"function": "SendReceiveBlockingLock",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2859.0,
"function_hash": "3187742302934208715260827922469591478"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-1911b3bb",
"deprecated": false,
"target": {
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"281943612746316099753685868188517085984",
"141314236440607895726663964861559368442",
"195742389016092061786969750077728853950",
"87565008577501718359734180880997261133",
"318705560749297585227163663555069469938",
"33468516884825717933402594292532383640",
"175320875343873030869141503041157593279",
"174311298384466700926757822142840182685",
"295215499292180985094145815939227985784",
"234875400614499685866587192805330894001",
"97428576206055534039290941267129251006",
"298946320411583730639582470367796919699",
"22462607251922388412723998454162194590",
"284202138136025774542327547828451597187",
"305633180332462388121036454141786279453",
"133760219783153308811679735773154726471",
"269560360919447152394231045607331161033",
"326461970091435201289855204676643324200",
"293565078263264333075069709304788029077",
"168391007824207561276669507870870200917",
"59471427969084013507279700405962151850",
"177506899188461243410055774609416401045",
"40344347392046432150797077898889849886",
"151858819155820093053494775316371646728",
"161711620457057089788699946532196917420",
"289062675027430741814010070016981697253",
"116020403769005912587846518112892907923",
"289832834886074492591951427780318230031",
"107261575336733435878921665717339712743",
"88946224168648451887091228784828049853",
"117079349840657534868966611802647337638",
"159480275602757058485819907835832620065",
"223210158481492041401197786721805359269",
"332018838235846058781330504809669901440",
"109676243157903566426875392356710134708",
"337331237835138903024410575021739963615",
"143501981324238480801220336661162349895",
"79664298609827546841591186056999396709",
"288225481775934222813751815962123451882",
"120083377330723056714589223843468002787",
"8415307359989884174034846174035645762",
"70212633260052011669273314237391996460",
"326935040345755317789741607098299585438",
"325879840418223450682470695170234982644",
"52282138376662795344884074211805136749",
"97929318871083861033961674262557079822",
"88946224168648451887091228784828049853",
"117079349840657534868966611802647337638",
"176294158912912677163723443302755095394",
"203398221352604153316522932557017112820",
"276372894250127764318182785772737661092",
"16886386872981692633430211900431161278",
"172266720876652057840866321608235176004"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-19838088",
"deprecated": false,
"target": {
"function": "SendReceiveBlockingLock",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2859.0,
"function_hash": "3187742302934208715260827922469591478"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-1ab3b117",
"deprecated": false,
"target": {
"function": "wait_for_response",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 207.0,
"function_hash": "31500699518130028666424881322978713184"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-2437cdd1",
"deprecated": false,
"target": {
"function": "cifs_wake_up_task",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 74.0,
"function_hash": "294520042585078727605537488095868788767"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-243c0c64",
"deprecated": false,
"target": {
"function": "compound_send_recv",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 3966.0,
"function_hash": "280771355931489865601754751933971888520"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-2654b0a8",
"deprecated": false,
"target": {
"function": "cifs_wake_up_task",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 74.0,
"function_hash": "294520042585078727605537488095868788767"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-2dfee87b",
"deprecated": false,
"target": {
"function": "compound_send_recv",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 4018.0,
"function_hash": "333209219912855074023596908222805652918"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-36e0f47f",
"deprecated": false,
"target": {
"function": "wait_for_response",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 207.0,
"function_hash": "31500699518130028666424881322978713184"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-494b69f3",
"deprecated": false,
"target": {
"function": "cifs_compound_callback",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 226.0,
"function_hash": "210195164091433668563914884485029032448"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-497cb52a",
"deprecated": false,
"target": {
"function": "cifs_sync_mid_result",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 821.0,
"function_hash": "9953097082717021845468909994851812369"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-5719fb4d",
"deprecated": false,
"target": {
"function": "wait_for_response",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 251.0,
"function_hash": "218442219753944894432663366639675517272"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-58231639",
"deprecated": false,
"target": {
"function": "SendReceiveBlockingLock",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2859.0,
"function_hash": "3187742302934208715260827922469591478"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-5990e045",
"deprecated": false,
"target": {
"function": "cifs_sync_mid_result",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 830.0,
"function_hash": "194865557353650770686665071019479982187"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-59ab3411",
"deprecated": false,
"target": {
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"281943612746316099753685868188517085984",
"141314236440607895726663964861559368442",
"195742389016092061786969750077728853950",
"218053683575565128097420320192340960740",
"318705560749297585227163663555069469938",
"33468516884825717933402594292532383640",
"175320875343873030869141503041157593279",
"174311298384466700926757822142840182685",
"188614046678524955874119732933024508580",
"169328802521315166483163241231071947848",
"296504799387334308701989951281747688584",
"57888063367236661672691538093443349679",
"258413868232801083613477406612006894615",
"274866343385061476898397733417794730963",
"55332105578604179719659310855448627557",
"77227592812142608297752215523492935538",
"269560360919447152394231045607331161033",
"326461970091435201289855204676643324200",
"293565078263264333075069709304788029077",
"168391007824207561276669507870870200917",
"104772888920992738538730210935978893960",
"70483001978114516921143125370890157659",
"40344347392046432150797077898889849886",
"151858819155820093053494775316371646728",
"161711620457057089788699946532196917420",
"289062675027430741814010070016981697253",
"116020403769005912587846518112892907923",
"289832834886074492591951427780318230031",
"306745070764457812052927770707573707565",
"166844514422988742143196069932449018900",
"256926501125690232132630183529205662184",
"25515922603173601955755112576824282863",
"223210158481492041401197786721805359269",
"332018838235846058781330504809669901440",
"109676243157903566426875392356710134708",
"337331237835138903024410575021739963615",
"143501981324238480801220336661162349895",
"79664298609827546841591186056999396709",
"288225481775934222813751815962123451882",
"89245397860976897394084881550312977190",
"86313095935306155825158419586488210815",
"154145501389970523062761214258460081365",
"325879840418223450682470695170234982644",
"240491710820776903586311860755847220848",
"317581874704893734276833870570426494012",
"166844514422988742143196069932449018900",
"256926501125690232132630183529205662184",
"269784894901230873856697130115291250538",
"203398221352604153316522932557017112820",
"276372894250127764318182785772737661092",
"16886386872981692633430211900431161278",
"172266720876652057840866321608235176004"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-5f35e4c9",
"deprecated": false,
"target": {
"function": "__release_mid",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1966.0,
"function_hash": "32381625669649903645881196892226886861"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-617d94dc",
"deprecated": false,
"target": {
"function": "cifs_wake_up_task",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 74.0,
"function_hash": "294520042585078727605537488095868788767"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-629561c2",
"deprecated": false,
"target": {
"function": "cifs_compound_callback",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 226.0,
"function_hash": "210195164091433668563914884485029032448"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-68722687",
"deprecated": false,
"target": {
"function": "SendReceive",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2149.0,
"function_hash": "67100182376683063203459060422267242207"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-6eaf9aa6",
"deprecated": false,
"target": {
"function": "cifs_compound_callback",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 226.0,
"function_hash": "210195164091433668563914884485029032448"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-71303283",
"deprecated": false,
"target": {
"function": "cifs_compound_callback",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 226.0,
"function_hash": "210195164091433668563914884485029032448"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-730e0782",
"deprecated": false,
"target": {
"function": "_cifs_mid_q_entry_release",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1984.0,
"function_hash": "175910167736388918152483933066531498932"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-7b86e7cf",
"deprecated": false,
"target": {
"function": "_cifs_mid_q_entry_release",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1965.0,
"function_hash": "71776088111590003154409115350698695141"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-7cf477be",
"deprecated": false,
"target": {
"function": "_cifs_mid_q_entry_release",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1965.0,
"function_hash": "71776088111590003154409115350698695141"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-8cb1c0c9",
"deprecated": false,
"target": {
"function": "cifs_sync_mid_result",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 821.0,
"function_hash": "9953097082717021845468909994851812369"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-8e2dda85",
"deprecated": false,
"target": {
"function": "__release_mid",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1966.0,
"function_hash": "32381625669649903645881196892226886861"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-90256d85",
"deprecated": false,
"target": {
"function": "SendReceive",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2107.0,
"function_hash": "30142271721352995574855038734470001945"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-94aa203c",
"deprecated": false,
"target": {
"function": "SendReceive",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2107.0,
"function_hash": "30142271721352995574855038734470001945"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-95df1972",
"deprecated": false,
"target": {
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"281943612746316099753685868188517085984",
"141314236440607895726663964861559368442",
"195742389016092061786969750077728853950",
"87565008577501718359734180880997261133",
"318705560749297585227163663555069469938",
"33468516884825717933402594292532383640",
"175320875343873030869141503041157593279",
"174311298384466700926757822142840182685",
"295215499292180985094145815939227985784",
"234875400614499685866587192805330894001",
"97428576206055534039290941267129251006",
"298946320411583730639582470367796919699",
"22462607251922388412723998454162194590",
"284202138136025774542327547828451597187",
"305633180332462388121036454141786279453",
"133760219783153308811679735773154726471",
"269560360919447152394231045607331161033",
"326461970091435201289855204676643324200",
"293565078263264333075069709304788029077",
"168391007824207561276669507870870200917",
"59471427969084013507279700405962151850",
"177506899188461243410055774609416401045",
"40344347392046432150797077898889849886",
"151858819155820093053494775316371646728",
"161711620457057089788699946532196917420",
"289062675027430741814010070016981697253",
"116020403769005912587846518112892907923",
"289832834886074492591951427780318230031",
"107261575336733435878921665717339712743",
"88946224168648451887091228784828049853",
"117079349840657534868966611802647337638",
"159480275602757058485819907835832620065",
"223210158481492041401197786721805359269",
"332018838235846058781330504809669901440",
"109676243157903566426875392356710134708",
"337331237835138903024410575021739963615",
"143501981324238480801220336661162349895",
"79664298609827546841591186056999396709",
"288225481775934222813751815962123451882",
"120083377330723056714589223843468002787",
"8415307359989884174034846174035645762",
"70212633260052011669273314237391996460",
"326935040345755317789741607098299585438",
"325879840418223450682470695170234982644",
"52282138376662795344884074211805136749",
"97929318871083861033961674262557079822",
"88946224168648451887091228784828049853",
"117079349840657534868966611802647337638",
"176294158912912677163723443302755095394",
"203398221352604153316522932557017112820",
"276372894250127764318182785772737661092",
"16886386872981692633430211900431161278",
"172266720876652057840866321608235176004"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-9b72538c",
"deprecated": false,
"target": {
"function": "compound_send_recv",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 4298.0,
"function_hash": "47487349146872579211739864649227977518"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-a0029a0f",
"deprecated": false,
"target": {
"function": "wait_for_response",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 207.0,
"function_hash": "31500699518130028666424881322978713184"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-b094316e",
"deprecated": false,
"target": {
"function": "SendReceive",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2116.0,
"function_hash": "160973699298647338517953497832623399542"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-b1042a6d",
"deprecated": false,
"target": {
"function": "compound_send_recv",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 4298.0,
"function_hash": "47487349146872579211739864649227977518"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-b2331080",
"deprecated": false,
"target": {
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"281943612746316099753685868188517085984",
"141314236440607895726663964861559368442",
"195742389016092061786969750077728853950",
"87565008577501718359734180880997261133",
"318705560749297585227163663555069469938",
"33468516884825717933402594292532383640",
"175320875343873030869141503041157593279",
"174311298384466700926757822142840182685",
"295215499292180985094145815939227985784",
"234875400614499685866587192805330894001",
"97428576206055534039290941267129251006",
"298946320411583730639582470367796919699",
"22462607251922388412723998454162194590",
"284202138136025774542327547828451597187",
"305633180332462388121036454141786279453",
"133760219783153308811679735773154726471",
"269560360919447152394231045607331161033",
"326461970091435201289855204676643324200",
"293565078263264333075069709304788029077",
"168391007824207561276669507870870200917",
"59471427969084013507279700405962151850",
"177506899188461243410055774609416401045",
"40344347392046432150797077898889849886",
"151858819155820093053494775316371646728",
"161711620457057089788699946532196917420",
"289062675027430741814010070016981697253",
"116020403769005912587846518112892907923",
"289832834886074492591951427780318230031",
"107261575336733435878921665717339712743",
"88946224168648451887091228784828049853",
"117079349840657534868966611802647337638",
"159480275602757058485819907835832620065",
"223210158481492041401197786721805359269",
"332018838235846058781330504809669901440",
"109676243157903566426875392356710134708",
"337331237835138903024410575021739963615",
"143501981324238480801220336661162349895",
"79664298609827546841591186056999396709",
"288225481775934222813751815962123451882",
"120083377330723056714589223843468002787",
"8415307359989884174034846174035645762",
"70212633260052011669273314237391996460",
"326935040345755317789741607098299585438",
"325879840418223450682470695170234982644",
"52282138376662795344884074211805136749",
"97929318871083861033961674262557079822",
"88946224168648451887091228784828049853",
"117079349840657534868966611802647337638",
"176294158912912677163723443302755095394",
"203398221352604153316522932557017112820",
"276372894250127764318182785772737661092",
"16886386872981692633430211900431161278",
"172266720876652057840866321608235176004"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-b60de01f",
"deprecated": false,
"target": {
"function": "SendReceiveBlockingLock",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2685.0,
"function_hash": "79423007942525803155960503993161801180"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-b96d740f",
"deprecated": false,
"target": {
"function": "cifs_wake_up_task",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 74.0,
"function_hash": "294520042585078727605537488095868788767"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99960d282fba6634fa758df4124cb73ef8a77d8a",
"id": "CVE-2023-52572-cd3b9f3d",
"deprecated": false,
"target": {
"function": "SendReceiveBlockingLock",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2685.0,
"function_hash": "246869299510397202655144900459385586049"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-dbbd9d9d",
"deprecated": false,
"target": {
"function": "cifs_wake_up_task",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 74.0,
"function_hash": "294520042585078727605537488095868788767"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-e4eefb83",
"deprecated": false,
"target": {
"function": "cifs_compound_callback",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 226.0,
"function_hash": "210195164091433668563914884485029032448"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-e7272164",
"deprecated": false,
"target": {
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"281943612746316099753685868188517085984",
"141314236440607895726663964861559368442",
"195742389016092061786969750077728853950",
"218053683575565128097420320192340960740",
"318705560749297585227163663555069469938",
"33468516884825717933402594292532383640",
"334793051135126131382765688092136755346",
"217825015977581763175421335591404590072",
"188614046678524955874119732933024508580",
"169328802521315166483163241231071947848",
"296504799387334308701989951281747688584",
"57888063367236661672691538093443349679",
"258413868232801083613477406612006894615",
"274866343385061476898397733417794730963",
"55332105578604179719659310855448627557",
"77227592812142608297752215523492935538",
"269560360919447152394231045607331161033",
"326461970091435201289855204676643324200",
"293565078263264333075069709304788029077",
"168391007824207561276669507870870200917",
"104772888920992738538730210935978893960",
"70483001978114516921143125370890157659",
"40344347392046432150797077898889849886",
"151858819155820093053494775316371646728",
"161711620457057089788699946532196917420",
"289062675027430741814010070016981697253",
"116020403769005912587846518112892907923",
"289832834886074492591951427780318230031",
"306745070764457812052927770707573707565",
"166844514422988742143196069932449018900",
"256926501125690232132630183529205662184",
"25515922603173601955755112576824282863",
"223210158481492041401197786721805359269",
"332018838235846058781330504809669901440",
"109676243157903566426875392356710134708",
"337331237835138903024410575021739963615",
"143501981324238480801220336661162349895",
"79664298609827546841591186056999396709",
"288225481775934222813751815962123451882",
"89245397860976897394084881550312977190",
"86313095935306155825158419586488210815",
"154145501389970523062761214258460081365",
"325879840418223450682470695170234982644",
"240491710820776903586311860755847220848",
"317581874704893734276833870570426494012",
"166844514422988742143196069932449018900",
"256926501125690232132630183529205662184",
"269784894901230873856697130115291250538",
"203398221352604153316522932557017112820",
"276372894250127764318182785772737661092",
"16886386872981692633430211900431161278",
"172266720876652057840866321608235176004"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-e94dc139",
"deprecated": false,
"target": {
"function": "cifs_sync_mid_result",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 821.0,
"function_hash": "9953097082717021845468909994851812369"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-e9e390c3",
"deprecated": false,
"target": {
"function": "SendReceive",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2149.0,
"function_hash": "67100182376683063203459060422267242207"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76569e3819e0bb59fc19b1b8688b017e627c268a",
"id": "CVE-2023-52572-f547ce62",
"deprecated": false,
"target": {
"function": "wait_for_response",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 251.0,
"function_hash": "218442219753944894432663366639675517272"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d527f51331cace562393a8038d870b3e9916686f",
"id": "CVE-2023-52572-f7d6ba2a",
"deprecated": false,
"target": {
"function": "SendReceive",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 2149.0,
"function_hash": "67100182376683063203459060422267242207"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe87e2d0e6265859c659a3ef1e2559a83c5e8e68",
"id": "CVE-2023-52572-f8944512",
"deprecated": false,
"target": {
"function": "compound_send_recv",
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 3934.0,
"function_hash": "210035690582827471382201171593714630222"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed3b36f351d97dacb62cd0f399e8cf79f73bd30a",
"id": "CVE-2023-52572-f93bfad1",
"deprecated": false,
"target": {
"file": "fs/cifs/transport.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"281943612746316099753685868188517085984",
"141314236440607895726663964861559368442",
"195742389016092061786969750077728853950",
"218053683575565128097420320192340960740",
"318705560749297585227163663555069469938",
"33468516884825717933402594292532383640",
"175320875343873030869141503041157593279",
"174311298384466700926757822142840182685",
"188614046678524955874119732933024508580",
"169328802521315166483163241231071947848",
"296504799387334308701989951281747688584",
"57888063367236661672691538093443349679",
"258413868232801083613477406612006894615",
"274866343385061476898397733417794730963",
"55332105578604179719659310855448627557",
"77227592812142608297752215523492935538",
"269560360919447152394231045607331161033",
"326461970091435201289855204676643324200",
"293565078263264333075069709304788029077",
"168391007824207561276669507870870200917",
"104772888920992738538730210935978893960",
"70483001978114516921143125370890157659",
"40344347392046432150797077898889849886",
"151858819155820093053494775316371646728",
"161711620457057089788699946532196917420",
"289062675027430741814010070016981697253",
"116020403769005912587846518112892907923",
"289832834886074492591951427780318230031",
"306745070764457812052927770707573707565",
"166844514422988742143196069932449018900",
"256926501125690232132630183529205662184",
"25515922603173601955755112576824282863",
"223210158481492041401197786721805359269",
"332018838235846058781330504809669901440",
"109676243157903566426875392356710134708",
"337331237835138903024410575021739963615",
"143501981324238480801220336661162349895",
"79664298609827546841591186056999396709",
"288225481775934222813751815962123451882",
"89245397860976897394084881550312977190",
"86313095935306155825158419586488210815",
"154145501389970523062761214258460081365",
"325879840418223450682470695170234982644",
"240491710820776903586311860755847220848",
"317581874704893734276833870570426494012",
"166844514422988742143196069932449018900",
"256926501125690232132630183529205662184",
"269784894901230873856697130115291250538",
"203398221352604153316522932557017112820",
"276372894250127764318182785772737661092",
"16886386872981692633430211900431161278",
"172266720876652057840866321608235176004"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@908b3b5e97d25e879de3d1f172a255665491c2c3",
"id": "CVE-2023-52572-fc52781d",
"deprecated": false,
"target": {
"function": "cifs_compound_callback",
"file": "fs/smb/client/transport.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 226.0,
"function_hash": "210195164091433668563914884485029032448"
}
}
]