CVE-2023-53006
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
In the Linux kernel, the CIFS subsystem (SMB client) has a bug causing an oops due to an uncleared server->smbd_conn pointer during reconnection. In smbd_destroy(), the pointer is not cleared after freeing the smbd_connection struct, which can confuse reconnection attempts.
Risk Assessment
The vulnerability may cause system crashes during reconnection to SMB shares, potentially disrupting services relying on CIFS.
Recommendation
Apply the Linux kernel update containing the fix for CVE-2023-53006. Update systems using CIFS.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbd_destroy(), clear the server->smbd_conn pointer after freeing the smbd_connection struct that it points to so that reconnection doesn't get confused.