CVE-2023-5345
HighA use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
CVSS 3.1 score
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness type
CWE-416CVE-2023-5345 is a Use After Free vulnerability
What is Use After Free?
The product references memory after it has been freed, which may cause it to crash, use unexpected values, or execute code. Learn more on MITRE CWE
Affected versions
Linux kernel versions
0.0
and later are affected. Fixed in
6.6
and their respective stable series.
References
6 total-
Mailing List Patch
-
Mailing List Patch
-
Packet Stormhttp://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.htmlThird Party Advisory VDB Entry
-
Mailing List
-
Mailing List
Frequently asked questions
-
What is CVE-2023-5345?
CVE-2023-5345 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 , classified as an Use After Free flaw (CWE-416) . It affects Linux kernel versions from 0.0 onward and has been patched in 6.6. CVE-2023-5345 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2023-5345?
CVE-2023-5345 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. -
Is there a patch available for CVE-2023-5345?
Yes. CVE-2023-5345 has been patched. Fixed versions include 6.6. If you are running Linux kernel 0.0 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2023-5345 actively exploited?
No. CVE-2023-5345 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.