Review reviewHigh

CVE-2023-52479

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo.

PRIORITY ASSESSMENT

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.60%

Technical severityCVSS 8.8

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo.

Product: Linux Linux, linux kernel
Affected versions: >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 694e13732e830cbbfedb562e57f28644927c33fd, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 8226ffc759ea59f10067b9acdf7f94bae1c69930, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < d5b0e9d3563e7e314a850e81f42b2ef6f39882f9, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < c69813471a1ec081a0b9bf0c6bd7e8afd818afce, >= 5.15, < 5.15.135, >= 5.16 < 6.1.57, >= 6.2 < 6.5.7, 6.6
Fixed versions: 5.15.135, 6.1.57, 6.5.7

Confirm exposure before applying a vendor-supported change.

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.