Use-after-free in Linux kernel - CVE-2023-1193

Vulnerability identifier: #VU82688

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-1193

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS. A remote user can send specially crafted request to the server and crash the system.

Linux kernel
openEuler
kernel-debugsource
kernel
python3-perf-debuginfo
kernel-devel
kernel-tools
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-source
perf
kernel-tools-devel
python3-perf
perf-debuginfo
kernel-headers
kernel-tools-debuginfo

Install updates from vendor's website.

Linux kernel - update to 6.3 rc6
kernel-debugsource - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
python3-perf-debuginfo - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel-devel - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel-tools - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
bpftool - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
bpftool-debuginfo - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel-debuginfo - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel-source - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
perf - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel-tools-devel - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
python3-perf - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
perf-debuginfo - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel-headers - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112
kernel-tools-debuginfo - addressed in versions 5.10.0-60.119.0.146, 5.10.0-136.57.0.136, 5.10.0-153.35.0.112

• https://bugzilla.redhat.com/show_bug.cgi?id=2154177
• https://lkml.kernel.org/linux-cifs/20230401084951.6085-2-linkinjeon@kernel.org/T/
• https://access.redhat.com/security/cve/CVE-2023-1193

• Denial of service in Linux kernel KSMBD
• openEuler 22.03 LTS update for kernel
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS SP2 update for kernel