CVE-2023-52480
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
In the Linux kernel, a race condition between session lookup and expiration in ksmbd can lead to a use-after-free. The fix adds an rwsem to synchronize these operations.
Risk Assessment
An attacker could exploit this to corrupt kernel memory, potentially leading to privilege escalation or system crash.
Recommendation
Apply the Linux kernel update containing the fix for CVE-2023-52480. Monitor security advisories and deploy the patch urgently.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.