CVE Database›Document archive›CVE-2023-53358

CVE-2023-53358

kernel: ksmbd: fix racy issue under cocurrent smb2 tree disconnect

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 17, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix racy issue under cocurrent smb2 tree disconnect

There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent access.

Statement

This vulnerability has no security impact on Red Hat Enterprise Linux because the in-kernel SMB server (ksmbd) is neither enabled nor shipped in supported kernels. File sharing services within Red Hat environments rely on user-space Samba implementations rather than kernel-space file servers. Therefore, supported Red Hat products do not contain the affected code and are not vulnerable to this race condition.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified