CVE-2023-53358
kernel: ksmbd: fix racy issue under cocurrent smb2 tree disconnect
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 17, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix racy issue under cocurrent smb2 tree disconnect
There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent access.
Statement
This vulnerability has no security impact on Red Hat Enterprise Linux because the in-kernel SMB server (ksmbd) is neither enabled nor shipped in supported kernels. File sharing services within Red Hat environments rely on user-space Samba implementations rather than kernel-space file servers. Therefore, supported Red Hat products do not contain the affected code and are not vulnerable to this race condition.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified