What’s Vulnerable › Vulnerabilities

CVE-2023-53399: ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-08-04
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() If share is , share->path is NULL and it cause NULL pointer dereference issue.

Affected products

• Linux kernel: from 5.15 before 5.15.111; from 5.16 before 6.1.28; from 6.2 before 6.2.15; from 6.3 before 6.3.2 — fixed in 5.15.111, 6.1.28, 6.2.15, 6.3.2

How to fix

Upgrade to a fixed version: Linux kernel 5.15.111, 6.1.28, 6.2.15, 6.3.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1636e09779f83e10e6ed57d91ef94abcefdd206b
• https://git.kernel.org/stable/c/227eb2689b44d0d60da3839b146983e73435924c
• https://git.kernel.org/stable/c/3ac00a2ab69b34189942afa9e862d5170cdcb018
• https://git.kernel.org/stable/c/a70751dd7b60eab025e97e19b6b2477c6eaf2bbb
• https://git.kernel.org/stable/c/b35f6c031b87d9e51f141ff6de0ea59756a8e313

Get alerted when CVE-2023-53399 or the next vulnerability affects your stack