CVE-2023-52752

Summary

CVE-2023-52752 is a use-after-free vulnerability affecting the Linux kernel's smb (SMB) client. This issue was identified in the function cifs_debug_data_proc_show() and specifically arises from not properly handling SMB sessions undergoing teardown. As a result, attempting to read from the /proc/fs/cifs/DebugData file during mounting or umounting can lead to a general protection fault (GPF), as evidenced by crash logs showing non-canonical addresses. The fix for this vulnerability involves skipping SMB sessions that are being terminated to prevent the use-after-free condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.