CVE-2023-5345: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.

Affected products

• Fedoraproject Fedora: version 37 only; version 38 only; version 39 only
• Linux Linux Kernel: from 6.0.16, before 6.1.56 (fixed in 6.1.56); from 6.2, before 6.5.6 (fixed in 6.5.6); version 6.6 only

Published 2023-10-03. Last modified 2026-06-17.