SECUFOCUSNOW
Home›CVE index›CVE-2023-52741
Review reviewHigh

CVE-2023-52741

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata->read_into_pages() When the network status is unstable, use-after-free may occur when read data from the server. BUG: KASAN: use-after-free in readpages_fill_pages+0x14c/0x7e0 Call Trace: <TASK> dump_stack_lvl+0x38/0x4c print_report+0x16f/0x4a6 kasan_report+0xb7/0x130 readpages_fill_pages+0x14c/0x7e0 cifs_readv_receive+0x46d/0xa40 cifs_demultiplex_thread+0x121c/0x1490 kthread+0x16b/0x1a0 ret_from_fork+0x2c/0x50 </TASK> Allocated by task 2535: kasan_save_stack+0x22/0x50 kasan_set_track+0x25/...

CVSS
7.8
EPSS
0.73%
50.6% percentile
CISA KEV
Not listed
Published
2024.05.22
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.73%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata->read_into_pages() When the network status is unstable, use-after-free may occur when read data from the server. BUG: KASAN: use-after-free in readpages_fill_pages+0x14c/0x7e0 Call Trace: <TASK> dump_stack_lvl+0x38/0x4c print_report+0x16f/0x4a6 kasan_report+0xb7/0x130 readpages_fill_pages+0x14c/0x7e0 cifs_readv_receive+0x46d/0xa40 cifs_demultiplex_thread+0x121c/0x1490 kthread+0x16b/0x1a0 ret_from_fork+0x2c/0x50 </TASK> Allocated by task 2535: kasan_save_stack+0x22/0x50 kasan_set_track+0x25/...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= b3160aebb49b5e07f6bc3b8c5bed6013ca9e422e < 2b693fe3f760c87fd9768e759f6297f743a1b3b0, >= b3160aebb49b5e07f6bc3b8c5bed6013ca9e422e < d1fba1e096ffc7ec11df863a97c50203c47315b9, >= b3160aebb49b5e07f6bc3b8c5bed6013ca9e422e < 3684a2f6affa1ca52a5d4a12f04d0652efdee65e, >= b3160aebb49b5e07f6bc3b8c5bed6013ca9e422e < aa5465aeca3c66fecdf7efcf554aed79b4c4b211, >= 3.17, < 5.10.168, >= 5.11 < 5.15.94, >= 5.16 < 6.1.12, 6.2
Fixed versions
5.10.168, 5.15.94, 6.1.12

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416