CVE-2023-54076: Linux

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper to get an active reference of @ses and @ses->dfs_root_ses (if set). This will prevent @ses->dfs_root_ses of being put in the next call to cifs_put_smb_ses() and thus potentially causing an use-after-free bug.

Affected products

• Linux Linux: from 6.2.15, before 6.3 (fixed in 6.3); from 6.3.2, before 6.4 (fixed in 6.4); from 6.4, before 6.4.7 (fixed in 6.4.7)

Published 2025-12-24. Last modified 2026-08-04.