CVE-2023-53794: Linux

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.

Affected products

• Linux Linux: from 3.10.103, before 3.11 (fixed in 3.11); from 3.12.63, before 3.13 (fixed in 3.13); from 3.14.74, before 3.15 (fixed in 3.15); from 3.16.37, before 3.17 (fixed in 3.17); from 3.18.37, before 3.19 (fixed in 3.19); from 4.1.28, before 4.2 (fixed in 4.2); …

Published 2025-12-09. Last modified 2026-08-04.