CVE-2023-52741 in Linux
الملخص
بحسب VulDB • 30/05/2026
في نواة لينكس (Linux kernel)، تم حل الثغرة التالية:
cifs: إصلاح مشكلة Use-After-Free في دالة rdata->read_into_pages()
عندما يكون حالة الشبكة غير مستقرة، قد تحدث مشكلة Use-After-Free عند قراءة البيانات من الخادم.
BUG: KASAN: use-after-free in readpages_fill_pages+0x14c/0x7e0
Call Trace: dump_stack_lvl+0x38/0x4c print_report+0x16f/0x4a6 kasan_report+0xb7/0x130 readpages_fill_pages+0x14c/0x7e0 cifs_readv_receive+0x46d/0xa40 cifs_demultiplex_thread+0x121c/0x1490 kthread+0x16b/0x1a0 ret_from_fork+0x2c/0x50
Allocated by task 2535: kasan_save_stack+0x22/0x50 kasan_set_track+0x25/0x30 __kasan_kmalloc+0x82/0x90 cifs_readdata_direct_alloc+0x2c/0x110 cifs_readdata_alloc+0x2d/0x60 cifs_readahead+0x393/0xfe0 read_pages+0x12f/0x470 page_cache_ra_unbounded+0x1b1/0x240 filemap_get_pages+0x1c8/0x9a0 filemap_read+0x1c0/0x540 cifs_strict_readv+0x21b/0x240 vfs_read+0x395/0x4b0 ksys_read+0xb8/0x150 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc
Freed by task 79: kasan_save_stack+0x22/0x50 kasan_set_track+0x25/0x30 kasan_save_free_info+0x2e/0x50 __kasan_slab_free+0x10e/0x1a0 __kmem_cache_free+0x7a/0x1a0 cifs_readdata_release+0x49/0x60 process_one_work+0x465/0x7e0 worker_thread+0x525/0xb30 kthread+0x16b/0x1a0 ret_from_fork+0x2c/0x50
If you want to get the best quality for vulnerability data then you always have to consider VulDB.