Refcount Leak in Linux Kernel's ksmbd Package - CVE-2023-53061
Summary
CVE-2023-53061: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2_open() Reference count of acls will leak when memory allocation fails. Affects linux versions < 6.1.25-1. Fixed in 6.1.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, including Debian. It manages system resources and provides essential services for hardware and software. The ksmbd module allows for SMB (Server Message Block) protocol support, enabling file sharing and printing services over a network. This vulnerability affects the kernel's handling of reference counts in the ksmbd module, which can lead to resource leaks and potential system instability.
Vulnerability Detail
CVE-2023-53061 is a vulnerability in the Linux kernel's ksmbd module, specifically in the smb2_open() function. The issue arises when memory allocation fails, leading to a reference count leak of access control lists (acls). This leak can result in increased memory usage and potential denial of service if not addressed. The vulnerability is critical as it can affect the stability and performance of systems relying on the ksmbd module for file sharing.
How To Fix
Minimum fixed version
6.1.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2023-53061 is a significant vulnerability in the Linux kernel's ksmbd module that can lead to resource leaks and system instability. It is essential to update to the fixed version 6.1.25-1 to protect your system. Utilize tools like Vulert to monitor vulnerabilities in your software effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2023-53061 is a vulnerability in the Linux kernel's ksmbd module that can lead to a reference count leak, potentially causing system instability.
This vulnerability can lead to increased memory usage and may result in a denial of service, affecting the performance of systems using the ksmbd module.
Yes, the patched version for Debian 12 and 13 is 6.1.25-1. Updating to this version will resolve the vulnerability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected without any signup.
While there are no specific workarounds, it is crucial to monitor your system's performance and apply the patch as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
