CVE-2023-53794Critical· 9.8▾ MidnightIn the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. N…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix session state check in reconnect to avoid use-after-free issue
Don't collect exiting session in smb2_reconnect_server(), because it will be released soon.
Note that the exiting session will stay in server->smb_ses_list until it complete the cifs_free_ipc() and logoff() and then delete itself from the list.
Linux >= 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 < 7e4f5c3f01fb0e51ca438e43262d858daf9a0a76Linux >= 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 < 759ffc164d95a32c09528766d74d9b4fb054e8f4Linux >= 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 < 99f280700b4cc02d5f141b8d15f8e9fad0418f65Linux 655e0c067f0e02ece03fd0591dabe3db2ae27552Linux 875cc09c0767a4ac06b57af383709657f98b3ea1Linux 599fe1409085059ba12a2c3897c853be9fa9e7cfLinux 2e4378ee60049b752c9dce16f62ce6fbd11b379aLinux 59b520454b323ec43b2ae757217332cea33091e0Linux e20c888e2b3576e5f498c167729d274ef60b86f8Linux 4ce7aa4e44d88ce64ea8ae2337b8910f3670b0baLinux 419fad68e4c4135ff9859e9214dd6cf954413ca1Linux >= 3.10.103 < 3.11Linux >= 3.12.63 < 3.13Linux >= 3.14.74 < 3.15Linux >= 3.16.37 < 3.17Linux >= 3.18.37 < 3.19Linux >= 4.1.28 < 4.2Linux >= 4.4.16 < 4.5Linux >= 4.6.5 < 4.7Linux 4.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…
CVE-2026-98432NoneIn the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without…
CVE-2026-98431NoneIn the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency Commit 51976c6cd786 ("RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages") …
CVE-2026-98430NoneIn the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ handler accesses both the admin completion queue and the async event queue
CVE-2026-98429NoneIn the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and DMA buffer
CVE-2026-98428NoneIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MIDI and communication, and this is basically a buggy imple…