Use-After-Free Vulnerability in KSMBD Implementation of Linux Kernel Samba Server and CIFS

Use-After-Free Vulnerability in KSMBD Implementation of Linux Kernel Samba Server and CIFS

CVE-2023-1193 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.