CVE-2023-52741
A use-after-free flaw in the Linux kernel's CIFS network file system code could allow an attacker to execute arbitrary code or cause a denial of service when reading data from an unstable SMB server. The flaw occurs when the network connection is unstable, leading to premature freeing of memory that is later accessed. The issue has been resolved in the kernel by adjusting the order of condition checks in the affected function.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel (including version 6.2) running CIFS/SMB file system operations.
Real-world impact
An attacker could exploit this flaw to execute arbitrary code with kernel privileges or crash the system, resulting in a denial of service.
Why this severity
CVSS v3.1 base score 9.8 (Critical) due to network‑adjacent attack vector, low attack complexity, no privileges or user interaction required, and high impact to confidentiality, integrity, and availability.
What to do about it
- 01Obtain the latest Linux kernel update from your distribution that includes the fix for CVE-2023-52741.
- 02Install the updated kernel package.
- 03Reboot the system to load the patched kernel.
NVD-referenced vendor advisory (Linux kernel fix)
Timeline
- May 21, 2024 · May 21, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.