CVE-2023-53358

Source
https://cve.org/CVERecord?id=CVE-2023-53358
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53358.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53358
Downstream
Published
2025-09-17T14:56:48.812Z
Modified
2026-08-06T03:31:25.641940173Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ksmbd: fix racy issue under cocurrent smb2 tree disconnect
Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix racy issue under cocurrent smb2 tree disconnect

There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREECONNEXPIRE flags for tcon to avoid cocurrent access.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53358.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0626e6641f6b467447c81dd7678a69c66f7746cf
Fixed
b36295c17fb97424406f0c3ab321b1ccaabb9be8
Fixed
bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6
Fixed
dc1c17716c099c90948ebb83e2170dd75a3be6b6
Fixed
39366b47a59d46af15ac57beb0996268bf911f6a
Fixed
30210947a343b6b3ca13adc9bfc88e1543e16dd5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53358.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
5.15.145
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.28
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.15
Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.3.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53358.json"