CVE-2023-53751

CriticalCVSS 9.8

Published: 08/12/2025(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

30th percentile - higher than 30% of all known CVEs

Summary

In the Linux kernel, cifs has a potential use-after-free in TCP_Server_Info::hostname. Protecting access outside the reconnect path prevents potential use-after-free bugs.

Risk Assessment

An attacker could exploit use-after-free to crash the system or execute code in the kernel.

Recommendation

Apply the Linux kernel patch that protects hostname access outside the reconnect path.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs.