CVE-2023-53358: Linux Kernel
High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent access.
Affected products
- Linux Linux Kernel: from 5.15, before 5.15.145 (fixed in 5.15.145); from 5.16, before 6.1.28 (fixed in 6.1.28); from 6.2, before 6.2.15 (fixed in 6.2.15); from 6.3, before 6.3.2 (fixed in 6.3.2)
Published 2025-09-17. Last modified 2026-08-04.