CVE-2023-52572

Description

A use-after-free flaw was found in cifs_demultiplex_thread() in the Linux kernel. This may lead to a crash.

Statement

This flaw was found to be a duplicate of CVE-2023-1192. Please see https://access.redhat.com/security/cve/CVE-2023-1192 for information about affected products and security errata.

Understanding the Weakness (CWE)

CWE-825

Confidentiality

Technical Impact: Read Memory

If the expired pointer is used in a read operation, an attacker might be able to control data read in by the application.

Availability

Technical Impact: DoS: Crash, Exit, or Restart

If the expired pointer references a memory location that is not accessible to the product, or points to a location that is "malformed" (such as NULL) or larger than expected by a read or write operation, then a crash may occur.

Integrity,Confidentiality,Availability

Technical Impact: Execute Unauthorized Code or Commands

If the expired pointer is used in a function call, or points to unexpected data in a write operation, then code execution may be possible.

Frequently Asked Questions

Not sure what something means? Check out our Security Glossary.

Want to get errata notifications? Sign up here.