VDB

CVE-2023-53358

CVE-2023-53358 PUBLISHED CVSS 7 HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent access.

EPSS 0.02% · 5.3th percentile

Risk Scores

CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.02%
5.3th percentile

Affected Products

VendorProductVersions
LinuxLinux*, 0626e6641f6b467447c81dd7678a69c66f7746cf, 0626e6641f6b467447c81dd7678a69c66f7746cf
linuxlinux_kernel5.15, 5.15, 5.15

Timeline

  • Jan 21, 1970 Security Advisory
  • Sep 17, 2025 CVE Published
  • Sep 18, 2025 EPSS Score
  • Sep 25, 2025 EPSS Score
  • Oct 2, 2025 EPSS Score
  • Oct 9, 2025 EPSS Score
  • Oct 12, 2025 Coalition ESS Score
  • Oct 16, 2025 EPSS Score
  • Oct 23, 2025 EPSS Score
  • Oct 30, 2025 EPSS Score
  • Nov 6, 2025 EPSS Score
  • Nov 13, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›