In the Linux kernel, the following vulnerability has been resolved:
cifs: prevent use-after-free by freeing the cfile later
In smb2_compound_op we have a possible use-after-free
which can cause hard to debug problems later on.
This was revealed during stress testing with KASAN enabled
kernel. Fixing it by moving the cfile free call to
a few lines below, after the usage.
References
Configurations
Configuration 1 (hide)
|
History
12 Dec 2025, 18:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Linux linux Kernel |
|
| CWE | CWE-416 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | () https://git.kernel.org/stable/c/33f736187d08f6bc822117629f263b97d3df4165 - Patch | |
| References | () https://git.kernel.org/stable/c/4fe07d55a5461e66a55fbefb57f85ff0facea32b - Patch | |
| References | () https://git.kernel.org/stable/c/b6353518ef8180816e863aa23b06456f395404d6 - Patch | |
| References | () https://git.kernel.org/stable/c/d017880782cf71f8820ee4a2002843893176501d - Patch |
18 Sep 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-18 14:15
Updated : 2025-12-12 18:08
NVD link : CVE-2023-53377
Mitre link : CVE-2023-53377
CVE.ORG link : CVE-2023-53377
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free