Use-After-Free Vulnerability in Linux Kernel CIFS Component

CVE-2023-53751

What is CVE-2023-53751?

A potential use-after-free vulnerability was identified in the Linux kernel's CIFS (Common Internet File System) where the TCP_Server_Info::hostname could be modified multiple times during the reconnection process. This flaw allows for unsafe access to the hostname variable outside the reconnection path, creating a risk of access to freed memory, which could be exploited by attackers. Enhanced protections have been implemented to safeguard access to this variable and to eliminate potential use-after-free scenarios.

References