Use-After-Free Vulnerability in Linux Kernel's CIFS Module - DEBIAN-CVE-2023-52751
Summary
DEBIAN-CVE-2023-52751: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in smb2_query_info_compound() The following UAF was triggered when running fstests generic/072 with KASAN enabled agains... Affects linux versions < 6.6.8-1. Fixed in 6.6.8-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It supports various file systems, including the Common Internet File System (CIFS), which allows for file sharing over a network. The CIFS module in the Linux kernel facilitates communication with Windows file shares, making it crucial for interoperability in mixed-OS environments. However, a recent vulnerability has been identified that affects the stability and security of this module.
Vulnerability Detail
The vulnerability, identified as DEBIAN-CVE-2023-52751, is a use-after-free (UAF) issue in the smb2_query_info_compound function of the CIFS module. This flaw can be triggered when running specific tests against Windows Server 2022 with certain mount options. The UAF occurs due to a race condition between the open_cached_dir and cached_dir_lease_break functions, leading to potential exploitation. An attacker could exploit this vulnerability to cause a denial of service or potentially execute arbitrary code, compromising the integrity of the system.
How To Fix
Minimum fixed version
6.6.8-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the CIFS module with the specified mount options until the patch is applied. This may involve using alternative file sharing methods or disabling CIFS access until the vulnerability is resolved.
Conclusion
The DEBIAN-CVE-2023-52751 vulnerability presents a significant risk to systems using the Linux kernel's CIFS module. It is crucial for users to update their systems to the patched version to mitigate potential threats. Awareness and prompt action are essential to maintaining system security.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to crashes or arbitrary code execution.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Not addressing this vulnerability could lead to system instability, data loss, or unauthorized access, putting sensitive information at risk.
Yes, the vulnerability affects the Linux packages in Debian 13 and 14, specifically versions prior to 6.6.8-1.
If immediate updates are not possible, consider implementing the suggested workaround of avoiding the use of CIFS with the vulnerable mount options.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
