CVE-2023-52480

Summary

CVE-2023-52480 is a recently identified vulnerability in the Linux kernel that affected the ksmbd component. The issue involved a race condition between session lookup and expiration, allowing an attacker to potentially execute a use-after-free (UAF) attack. Specifically, Thread A performing a ksmbd_session_lookup while Thread B was expiring a session and concurrently freeing its memory could lead to the affected session being accessed after being freed. To address this issue, the patch introduces the use of a read-write semaphore (rwsem) to synchronize access between ksmbd_session_lookup and ksmbd_expire_session, thereby preventing the race condition and the associated UAF vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.