CVE-2023-53794

CriticalCVSS 9.8

Published: 09/12/2025(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

In the Linux kernel's cifs module, a session state check issue during reconnect can lead to a use-after-free. The fix prevents collecting an exiting session in smb2_reconnect_server() because it will be released soon.

Risk Assessment

This vulnerability could cause memory corruption during SMB reconnection, potentially leading to system crashes or privilege escalation.

Recommendation

Install the Linux kernel update with the fix for CVE-2023-53794. Check systems using CIFS/SMB.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.