{"id":"CVE-2023-52480","summary":"ksmbd: fix race condition between session lookup and expire","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix race condition between session lookup and expire\n\n Thread A                        +  Thread B\n ksmbd_session_lookup            |  smb2_sess_setup\n   sess = xa_load                |\n                                 |\n                                 |    xa_erase(&conn-\u003esessions, sess-\u003eid);\n                                 |\n                                 |    ksmbd_session_destroy(sess) --\u003e kfree(sess)\n                                 |\n   // UAF!                       |\n   sess-\u003elast_active = jiffies   |\n                                 +\n\nThis patch add rwsem to fix race condition between ksmbd_session_lookup\nand ksmbd_expire_session.","modified":"2026-04-02T09:42:51.242523Z","published":"2024-02-29T05:43:12.019Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52480.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/18ced78b0ebccc2d16f426143dc56ab3aad666be"},{"type":"WEB","url":"https://git.kernel.org/stable/c/53ff5cf89142b978b1a5ca8dc4d4425e6a09745f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a2ca5fd3dbcc665e1169044fa0c9e3eba779202b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c77fd3e25a51ac92b0f1b347a96eff6a0b4f066f"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52480.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52480"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0626e6641f6b467447c81dd7678a69c66f7746cf"},{"fixed":"c77fd3e25a51ac92b0f1b347a96eff6a0b4f066f"},{"fixed":"a2ca5fd3dbcc665e1169044fa0c9e3eba779202b"},{"fixed":"18ced78b0ebccc2d16f426143dc56ab3aad666be"},{"fixed":"53ff5cf89142b978b1a5ca8dc4d4425e6a09745f"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52480.json"}}],"schema_version":"1.7.5"}