CVE-2024-53095
A use-after-free vulnerability exists in the Linux kernel's CIFS client when handling network namespaces. Incorrect reference counting allows the network namespace to be freed while a socket still references it, leading to kernel oops during reconnection. The issue is rated critical with a CVSS score of 9.8.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel (CIFS client) users, especially those mounting CIFS shares in non-root network namespaces (e.g., Kubernetes pods).
Real-world impact
An attacker could trigger a kernel crash or potentially gain elevated privileges by causing the use-after-free condition during CIFS reconnection.
Why this severity
CVSS 3.1 base score 9.8 (Critical) due to network attack vector, low complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the patch resolving CVE-2024-53095 (the fix ensures proper network namespace reference counting for CIFS sockets).
- 02After upgrading, reboot the system to load the updated kernel.
NVD description indicates the vulnerability has been resolved in the Linux kernel.
Timeline
- Nov 21, 2024 · Nov 21, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.