{
  "cveId": "CVE-2023-52741",
  "url": "https://patchblox.com/security/cve/CVE-2023-52741",
  "summary": "CVE-2023-52741 is fixed in 20 products on 1 platform, first by ALAS2023-2023-132, released March 11, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix use-after-free in rdata-\u003Eread_into_pag...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix use-after-free in rdata-\u003Eread_into_pages()  When the network status is unstable, use-after-free may occur when read data from the server.    BUG: KASAN: use-after-free in readpages_fill_pages\u002B0x14c/0x7e0    Call Trace:    \u003CTASK\u003E    dump_stack_lvl\u002B0x38/0x4c    print_report\u002B0x16f/0x4a6    kasan_report\u002B0xb7/0x130    readpages_fill_pages\u002B0x14c/0x7e0    cifs_readv_receive\u002B0x46d/0xa40    cifs_demultiplex_thread\u002B0x121c/0x1490    kthread\u002B0x16b/0x1a0    ret_from_fork\u002B0x2c/0x50    \u003C/TASK\u003E    Allocated by task 2535:    kasan_save_stack\u002B0x22/0x50    kasan_set_track\u002B0x25/0x30    __kasan_kmalloc\u002B0x82/0x90    cifs_readdata_direct_alloc\u002B0x2c/0x110    cifs_readdata_alloc\u002B0x2d/0x60    cifs_readahead\u002B0x393/0xfe0    read_pages\u002B0x12f/0x470    page_cache_ra_unbounded\u002B0x1b1/0x240    filemap_get_pages\u002B0x1c8/0x9a0    filemap_read\u002B0x1c0/0x540    cifs_strict_readv\u002B0x21b/0x240    vfs_read\u002B0x395/0x4b0    ksys_read\u002B0xb8/0x150    do_syscall_64\u002B0x3f/0x90    entry_SYSCALL_64_after_hwframe\u002B0x72/0xdc    Freed by task 79:    kasan_save_stack\u002B0x22/0x50    kasan_set_track\u002B0x25/0x30    kasan_save_free_info\u002B0x2e/0x50    __kasan_slab_free\u002B0x10e/0x1a0    __kmem_cache_free\u002B0x7a/0x1a0    cifs_readdata_release\u002B0x49/0x60    process_one_work\u002B0x46c/0x760    worker_thread\u002B0x2a4/0x6f0    kthread\u002B0x16b/0x1a0    ret_from_fork\u002B0x2c/0x50    Last potentially related work creation:    kasan_save_stack\u002B0x22/0x50    __kasan_record_aux_stack\u002B0x95/0xb0    insert_work\u002B0x2b/0x130    __queue_work\u002B0x1fe/0x660    queue_work_on\u002B0x4b/0x60    smb2_readv_callback\u002B0x396/0x800    cifs_abort_connection\u002B0x474/0x6a0    cifs_reconnect\u002B0x5cb/0xa50    cifs_readv_from_socket.cold\u002B0x22/0x6c    cifs_read_page_from_socket\u002B0xc1/0x100    readpages_fill_pages.cold\u002B0x2f/0x46    cifs_readv_receive\u002B0x46d/0xa40    cifs_demultiplex_thread\u002B0x121c/0x1490    kthread\u002B0x16b/0x1a0    ret_from_fork\u002B0x2c/0x50  The following function calls will cause UAF of the rdata pointer.  readpages_fill_pages  cifs_read_page_from_socket   cifs_readv_from_socket    cifs_reconnect     __cifs_reconnect      cifs_abort_connection       mid-\u003Ecallback() --\u003E smb2_readv_callback        queue_work(\u0026rdata-\u003Ework)  # if the worker completes first,                                  # the rdata is freed           cifs_readv_complete             kref_put               cifs_readdata_release                 kfree(rdata)  return rdata-\u003E...               # UAF in readpages_fill_pages()  Similarly, this problem also occurs in the uncache_fill_pages().  Fix this by adjusts the order of condition judgment in the return statement.",
  "published": "2023-03-11T01:10:00Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00731,
  "epssPercentile": 0.54563,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.12-17.42",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.12-1",
      "fix": "DEBIAN-CVE-2023-52741",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52741",
      "released": "2024-05-21T16:15:14Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.12-1",
      "fix": "DEBIAN-CVE-2023-52741",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52741",
      "released": "2024-05-21T16:15:14Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.12-1",
      "fix": "DEBIAN-CVE-2023-52741",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52741",
      "released": "2024-05-21T16:15:14Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.12-17.42.amzn2023",
      "fix": "ALAS2023-2023-132",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-132",
      "released": "2023-03-11T01:10:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}