Most recent entries from all

Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:33:43 +0000 CVE-2023-52480 — ksmbd: fix race condition between session lookup and expire https://vulnerability.circl.lu/vuln/cve-2023-52480 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: fix race condition between session lookup and expire</p> <p>Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | +</p> <p>This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: fix race condition between session lookup and expire</p> <p>Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | +</p> <p>This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.</p> https://vulnerability.circl.lu/vuln/cve-2023-52480