CVE-2023-54280
Description
AI Translation Available
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix potential race when tree connecting ipc
Protect access of TCP_Server_Info::hostname when building the ipc tree
name as it might get freed in cifsd thread and thus causing an
use-after-free bug in __tree_connect_dfs_target(). Also, while at it,
update status of IPC tcon on success and then avoid any extra tree
connects.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0002
Percentile
0,1th
Updated
EPSS Score Trend (Last 76 Days)
https://git.kernel.org/stable/c/536ec71ba060a02fabe8e22cecb82fe7b3a8708b
https://git.kernel.org/stable/c/553476df55a111e6a66ad9155256aec0ec1b7ad0
https://git.kernel.org/stable/c/ee20d7c6100752eaf2409d783f4f1449c29ea33d