---
id: CVE-2023-54280
title: 'cifs: fix potential race when tree connecting ipc'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cifs: fix potential race when tree connecting ipc

  Protect access of TCP_Server_Info::hostname when building the ipc tree
  name as it might get freed in cifsd thread and…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e <
    536ec71ba060a02fabe8e22cecb82fe7b3a8708b
  - >-
    Linux >= c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e <
    553476df55a111e6a66ad9155256aec0ec1b7ad0
  - >-
    Linux >= c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e <
    ee20d7c6100752eaf2409d783f4f1449c29ea33d
  - Linux 81d583baa5f1abd73c755ce1992929debd20b687
  - Linux >= 5.15.81 < 5.16
  - Linux 5.16
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-15T21:39:59.690437Z'
published: '2025-12-30'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:41:43.877Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-54280'
references:
  - url: 'https://git.kernel.org/stable/c/536ec71ba060a02fabe8e22cecb82fe7b3a8708b'
  - url: 'https://git.kernel.org/stable/c/553476df55a111e6a66ad9155256aec0ec1b7ad0'
  - url: 'https://git.kernel.org/stable/c/ee20d7c6100752eaf2409d783f4f1449c29ea33d'
tags:
  - cve.org
epss: 0.00515
epssPercentile: 0.42424
ingestedAt: '2026-10-15T22:48:25.437Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential race when tree connecting ipc

Protect access of TCP_Server_Info::hostname when building the ipc tree
name as it might get freed in cifsd thread and thus causing an
use-after-free bug in __tree_connect_dfs_target().  Also, while at it,
update status of IPC tcon on success and then avoid any extra tree
connects.

## Affected

- `Linux >= c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e < 536ec71ba060a02fabe8e22cecb82fe7b3a8708b`
- `Linux >= c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e < 553476df55a111e6a66ad9155256aec0ec1b7ad0`
- `Linux >= c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e < ee20d7c6100752eaf2409d783f4f1449c29ea33d`
- `Linux 81d583baa5f1abd73c755ce1992929debd20b687`
- `Linux >= 5.15.81 < 5.16`
- `Linux 5.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.