CVE-2023-53006
A critical bug in the Linux kernel’s CIFS module could cause the system to crash. The issue was fixed by clearing an internal pointer during reconnection. The patch is included in newer kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users, especially those running versions 6.2 or earlier that contain the CIFS module. System administrators and server operators are typical users.
Real-world impact
An attacker could trigger a kernel crash, leading to a denial‑of‑service condition on the affected machine.
Why this severity
The CVSS score of 9.8 reflects that the flaw can be exploited remotely without authentication, and it can compromise confidentiality, integrity, and availability of the system.
What to do about it
- 011. Update the Linux kernel to a version that includes the fix (e.g., 6.2 or later).
- 022. Reboot the system to load the new kernel.
NVD-referenced vendor advisory
Timeline
- Mar 27, 2025 · Mar 27, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.