What’s Vulnerable › Vulnerabilities

CVE-2023-52479: ksmbd: fix uaf in smb20_oplock_break_ack

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-29 · updated 2026-08-15
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo.

Affected products

• Linux kernel: before 5.15.135; from 5.16 before 6.1.57; from 6.2 before 6.5.7; 6.6-rc1, 6.6-rc2, 6.6-rc3, 6.6-rc4 — fixed in 5.15.135, 6.1.57, 6.5.7

How to fix

Upgrade to a fixed version: Linux kernel 5.15.135, 6.1.57, 6.5.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/694e13732e830cbbfedb562e57f28644927c33fd
• https://git.kernel.org/stable/c/8226ffc759ea59f10067b9acdf7f94bae1c69930
• https://git.kernel.org/stable/c/c69813471a1ec081a0b9bf0c6bd7e8afd818afce
• https://git.kernel.org/stable/c/d5b0e9d3563e7e314a850e81f42b2ef6f39882f9
• https://git.kernel.org/stable/c/694e13732e830cbbfedb562e57f28644927c33fd
• https://git.kernel.org/stable/c/8226ffc759ea59f10067b9acdf7f94bae1c69930
• https://git.kernel.org/stable/c/c69813471a1ec081a0b9bf0c6bd7e8afd818afce
• https://git.kernel.org/stable/c/d5b0e9d3563e7e314a850e81f42b2ef6f39882f9

Get alerted when CVE-2023-52479 or the next vulnerability affects your stack