CVE-2023-52757

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-52757
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52757.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52757
Downstream
Related
Published
2024-05-21T15:30:44.248Z
Modified
2026-03-20T12:32:45.827608Z
Summary
smb: client: fix potential deadlock when releasing mids
Details

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential deadlock when releasing mids

All releasemid() callers seem to hold a reference of @mid so there is no need to call krefput(&mid->refcount, __releasemid) under @server->midlock spinlock. If they don't, then an use-after-free bug would have occurred anyways.

By getting rid of such spinlock also fixes a potential deadlock as shown below

CPU 0 CPU 1

cifsdemultiplexthread() cifsdebugdataprocshow() releasemid() spinlock(&server->midlock); spinlock(&cifstcpseslock) spinlock(&server->mid_lock) __releasemid() smb2findsmbtcon() spinlock(&cifstcpseslock) deadlock

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52757.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7b71843fa7028475b052107664cbe120156a2cfc
Fixed
99f476e27aad5964ab13777d84fda67d1356dec1
Fixed
ce49569079a9d4cad26c0f1d4653382fd9a5ca7a
Fixed
9eb44db68c5b7f5aa22b8fc7de74a3e2e08d1f29
Fixed
b9bb9607b1fc12fca51f5632da25b36975f599bf
Fixed
c1a5962f1462b64fe7b69f20a4b6af8067bc2d26
Fixed
e6322fd177c6885a21dd4609dc5e5c973d1a2eb7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9871dea42034ee6e73bb2b97ba0284d3d462b230

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52757.json"