CVE-2023-53006

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix oops due to uncleared server->smbd_conn in reconnect

In smbd_destroy(), clear the server->smbd_conn pointer after freeing the smbd_connection struct that it points to so that reconnection doesn't get confused.

Red Hat has evaluated this vulnerability as Moderate impact because exploitation is limited to a local denial of service via a kernel crash and requires an established SMB Direct session, without affecting data confidentiality or integrity. SMB Direct over RDMA is an uncommon configuration that is not enabled by default in typical Red Hat Enterprise Linux environments. Furthermore, establishing CIFS mounts typically requires administrative privileges, significantly constraining exposure on production systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.