CVE-2023-53006

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-53006", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-03-27T16:40:15.745Z", "datePublished": "2025-03-27T16:43:37.225Z", "dateUpdated": "2026-10-15T21:41:25.078Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T09:12:20.807Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix oops due to uncleared server->smbd_conn in reconnect\n\nIn smbd_destroy(), clear the server->smbd_conn pointer after freeing the\nsmbd_connection struct that it points to so that reconnection doesn't get\nconfused."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}, "scenarios": [{"lang": "en", "value": "AV:N - The UAF is in the CIFS client's SMB Direct reconnect path (`cifs_abort_connection` \u2192 `smbd_destroy` \u2192 `smbd_reconnect`), driven by a remote peer dropping the RDMA/iWARP connection; iWARP/RoCEv2 are IP-reachable so a malicious or compromised SMB Direct server is a network attacker.\nAC:L - After any disconnect, `__cifs_reconnect` deterministically frees `smbd_conn` then immediately dereferences the dangling pointer in `smbd_reconnect`; the remote peer forces disconnects at will and can retry unboundedly every reconnect cycle.\nPR:N - The attacker is the remote SMB Direct server (or on-path peer) and needs no account or privileges on the victim; the vulnerable abort/reconnect runs in the cifsd kernel thread on the transport before SMB re-authentication.\nUI:N - Against an already-mounted `rdma` CIFS share (typical fstab/autofs enterprise setup), cifsd automatically reconnects on peer disconnect with no victim action at exploit time.\nS:U - The use-after-free corrupts host kernel heap (`smbd_connection` in kmalloc-4k) within the same OS security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - This is a use-after-free of the heap-allocated `smbd_connection`; reclaim/grooming of the freed object lets the reconnect path read attacker-influenced fields (e.g. `transport_status`), yielding a kernel disclosure primitive per UAF guidance.\nI:H - If the reclaimed object presents `transport_status == SMBD_CONNECTED`, `smbd_destroy` runs RDMA teardown (disconnect, QP drain, frees) on attacker-controlled structure fields, giving a classic heap UAF write/control-flow hijack primitive.\nA:H - The dangling `server->smbd_conn` dereference is a confirmed KASAN use-after-free/oops in `smbd_reconnect` during reconnect and is repeatedly triggerable by peer disconnects."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/cifs/smbdirect.c"], "versions": [{"version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "a9640c0b268405f2540e8203a545e930ea88bb7d", "status": "affected", "versionType": "git"}, {"version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "91be54849d5392050f5b847b42bd5e6221551ac8", "status": "affected", "versionType": "git"}, {"version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "e037baee16e0b9ace7e730888fcae9cec11daff2", "status": "affected", "versionType": "git"}, {"version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "4b83bc6f87eedab4599b0123e572a422689444be", "status": "affected", "versionType": "git"}, {"version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "5109607a4ece7cd8536172bf7549eb4dce1f3576", "status": "affected", "versionType": "git"}, {"version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/cifs/smbdirect.c"], "versions": [{"version": "4.16", "status": "affected"}, {"version": "0", "lessThan": "4.16", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.272", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.231", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.166", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.91", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.9", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "4.19.272"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "5.4.231"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "5.10.166"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "5.15.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.1.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a9640c0b268405f2540e8203a545e930ea88bb7d"}, {"url": "https://git.kernel.org/stable/c/91be54849d5392050f5b847b42bd5e6221551ac8"}, {"url": "https://git.kernel.org/stable/c/e037baee16e0b9ace7e730888fcae9cec11daff2"}, {"url": "https://git.kernel.org/stable/c/4b83bc6f87eedab4599b0123e572a422689444be"}, {"url": "https://git.kernel.org/stable/c/5109607a4ece7cd8536172bf7549eb4dce1f3576"}, {"url": "https://git.kernel.org/stable/c/b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7"}], "title": "cifs: Fix oops due to uncleared server->smbd_conn in reconnect", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-53006", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:33:05.727782Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:41:25.078Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-53006", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:33:05.727782Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:33:06.504Z"}}], "cna": {"title": "cifs: Fix oops due to uncleared server->smbd_conn in reconnect", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:N - The UAF is in the CIFS client's SMB Direct reconnect path (`cifs_abort_connection` \u2192 `smbd_destroy` \u2192 `smbd_reconnect`), driven by a remote peer dropping the RDMA/iWARP connection; iWARP/RoCEv2 are IP-reachable so a malicious or compromised SMB Direct server is a network attacker.\nAC:L - After any disconnect, `__cifs_reconnect` deterministically frees `smbd_conn` then immediately dereferences the dangling pointer in `smbd_reconnect`; the remote peer forces disconnects at will and can retry unboundedly every reconnect cycle.\nPR:N - The attacker is the remote SMB Direct server (or on-path peer) and needs no account or privileges on the victim; the vulnerable abort/reconnect runs in the cifsd kernel thread on the transport before SMB re-authentication.\nUI:N - Against an already-mounted `rdma` CIFS share (typical fstab/autofs enterprise setup), cifsd automatically reconnects on peer disconnect with no victim action at exploit time.\nS:U - The use-after-free corrupts host kernel heap (`smbd_connection` in kmalloc-4k) within the same OS security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - This is a use-after-free of the heap-allocated `smbd_connection`; reclaim/grooming of the freed object lets the reconnect path read attacker-influenced fields (e.g. `transport_status`), yielding a kernel disclosure primitive per UAF guidance.\nI:H - If the reclaimed object presents `transport_status == SMBD_CONNECTED`, `smbd_destroy` runs RDMA teardown (disconnect, QP drain, frees) on attacker-controlled structure fields, giving a classic heap UAF write/control-flow hijack primitive.\nA:H - The dangling `server->smbd_conn` dereference is a confirmed KASAN use-after-free/oops in `smbd_reconnect` during reconnect and is repeatedly triggerable by peer disconnects."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "a9640c0b268405f2540e8203a545e930ea88bb7d", "versionType": "git"}, {"status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "91be54849d5392050f5b847b42bd5e6221551ac8", "versionType": "git"}, {"status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "e037baee16e0b9ace7e730888fcae9cec11daff2", "versionType": "git"}, {"status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "4b83bc6f87eedab4599b0123e572a422689444be", "versionType": "git"}, {"status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "5109607a4ece7cd8536172bf7549eb4dce1f3576", "versionType": "git"}, {"status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "lessThan": "b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7", "versionType": "git"}], "programFiles": ["fs/cifs/smbdirect.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.16"}, {"status": "unaffected", "version": "0", "lessThan": "4.16", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.272", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.231", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.166", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.91", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.9", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/cifs/smbdirect.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/a9640c0b268405f2540e8203a545e930ea88bb7d"}, {"url": "https://git.kernel.org/stable/c/91be54849d5392050f5b847b42bd5e6221551ac8"}, {"url": "https://git.kernel.org/stable/c/e037baee16e0b9ace7e730888fcae9cec11daff2"}, {"url": "https://git.kernel.org/stable/c/4b83bc6f87eedab4599b0123e572a422689444be"}, {"url": "https://git.kernel.org/stable/c/5109607a4ece7cd8536172bf7549eb4dce1f3576"}, {"url": "https://git.kernel.org/stable/c/b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix oops due to uncleared server->smbd_conn in reconnect\n\nIn smbd_destroy(), clear the server->smbd_conn pointer after freeing the\nsmbd_connection struct that it points to so that reconnection doesn't get\nconfused."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.19.272", "versionStartIncluding": "4.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.231", "versionStartIncluding": "4.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.166", "versionStartIncluding": "4.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.91", "versionStartIncluding": "4.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.9", "versionStartIncluding": "4.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.2", "versionStartIncluding": "4.16"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T09:12:20.807Z"}}}, "cveMetadata": {"cveId": "CVE-2023-53006", "state": "PUBLISHED", "dateUpdated": "2026-10-15T21:41:25.078Z", "dateReserved": "2025-03-27T16:40:15.745Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2025-03-27T16:43:37.225Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/cifs/smbdirect.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a9640c0b268405f2540e8203a545e930ea88bb7d", "status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "versionType": "git"}, {"lessThan": "91be54849d5392050f5b847b42bd5e6221551ac8", "status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "versionType": "git"}, {"lessThan": "e037baee16e0b9ace7e730888fcae9cec11daff2", "status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "versionType": "git"}, {"lessThan": "4b83bc6f87eedab4599b0123e572a422689444be", "status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "versionType": "git"}, {"lessThan": "5109607a4ece7cd8536172bf7549eb4dce1f3576", "status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "versionType": "git"}, {"lessThan": "b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7", "status": "affected", "version": "8ef130f9ec27973f7b49e20c5a3b9134ca33026c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/cifs/smbdirect.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.16"}, {"lessThan": "4.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "4.19.*", "status": "unaffected", "version": "4.19.272", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.231", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.166", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.91", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "3446F3B4-D233-4278-8A08-5A361CFA91DE", "versionEndExcluding": "4.19.272", "versionStartIncluding": "4.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "79CA608C-BC5E-4BB5-9250-771AEC44F412", "versionEndExcluding": "5.4.231", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A44D9D24-661C-40D4-8735-4CEB1C7C02F2", "versionEndExcluding": "5.10.166", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "91C2E92D-CC25-4FBD-8824-56A148119D7E", "versionEndExcluding": "5.15.91", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "ED5B6045-B1D2-4E03-B194-9005A351BCAE", "versionEndExcluding": "6.1.9", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix oops due to uncleared server->smbd_conn in reconnect\n\nIn smbd_destroy(), clear the server->smbd_conn pointer after freeing the\nsmbd_connection struct that it points to so that reconnection doesn't get\nconfused."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cifs: soluciona el error debido a un servidor->smbd_conn sin borrar en la reconexi\u00f3n. En smbd_destroy(), borra el puntero server->smbd_conn despu\u00e9s de liberar la estructura smbd_connection a la que apunta para que la reconexi\u00f3n no se confunda."}], "id": "CVE-2023-53006", "lastModified": "2026-10-15T22:17:35.477", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-53006", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-15T21:33:05.727782Z", "version": "2.0.3"}}]}, "published": "2025-03-27T17:15:49.543", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4b83bc6f87eedab4599b0123e572a422689444be"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5109607a4ece7cd8536172bf7549eb4dce1f3576"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/91be54849d5392050f5b847b42bd5e6221551ac8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a9640c0b268405f2540e8203a545e930ea88bb7d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b7ab9161cf5ddc42a288edf9d1a61f3bdffe17c7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e037baee16e0b9ace7e730888fcae9cec11daff2"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2023:6583", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-362.8.1.el9_3", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-11-07T00:00:00Z"}, {"advisory": "RHSA-2023:6583", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-362.8.1.el9_3", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-11-07T00:00:00Z"}], "bugzilla": {"description": "kernel: cifs: Fix oops due to uncleared server->smbd_conn in reconnect", "id": "2355432", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2355432"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "verified"}, "details": ["In the Linux kernel, the following vulnerability has been resolved:\ncifs: Fix oops due to uncleared server->smbd_conn in reconnect\nIn smbd_destroy(), clear the server->smbd_conn pointer after freeing the\nsmbd_connection struct that it points to so that reconnection doesn't get\nconfused."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2023-53006", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-03-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-53006\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-53006\nhttps://lore.kernel.org/linux-cve-announce/2025032713-CVE-2023-53006-209f@gregkh/T"], "threat_severity": "Moderate"}

{}