CVE-2023-53751

A flaw was found in the Linux kernel's Common Internet File System (CIFS) component. This use-after-free vulnerability occurs due to improper handling of server hostname information during connection re-establishment. An attacker on an adjacent network could exploit this, potentially leading to a compromise of data integrity or a denial of service.

This MODERATE impact use-after-free flaw in the Linux kernel's CIFS component. An attacker on an adjacent network could exploit this vulnerability during connection re-establishment, potentially leading to data integrity compromise or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the cifs kernel module from loading if CIFS functionality is not required. Create a file named /etc/modprobe.d/disable-cifs.conf with the following content:

install cifs /bin/true

This will prevent the cifs module from being loaded automatically. A system reboot is required for this change to take effect. Note that disabling the cifs module will prevent the system from mounting CIFS shares.