VDB
CISA-2023-53377
CISA-2023-53377
PUBLISHED
CVSS 7.8 HIGH
Reported by Linux · Published September 18, 2025
In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2_compound_op we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress testing with KASAN enabled kernel. Fixing it by moving the cfile free call to a few lines below, after the usage.
Risk Scores
CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 76894f3e2f71177747b8b4763fb180e800279585, 76894f3e2f71177747b8b4763fb180e800279585, 76894f3e2f71177747b8b4763fb180e800279585 |
| Linux | Linux | 6.1, 0, 6.1.39 |
| Linux | Linux | *, 2d046892a493d9760c35fdaefc3017f27f91b621, 6.1 |
| linux | linux_kernel | 6.1, 6.1, 6.1 |
Timeline
- Sep 18, 2025 CVE Published
- Jan 14, 2026 CVE Updated