CVE-2023-53399 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()

If share is , share->path is NULL and it cause NULL pointer
dereference issue.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/1636e09779f83e10e6ed57d91ef94abcefdd206b
https://git.kernel.org/stable/c/227eb2689b44d0d60da3839b146983e73435924c
https://git.kernel.org/stable/c/3ac00a2ab69b34189942afa9e862d5170cdcb018
https://git.kernel.org/stable/c/a70751dd7b60eab025e97e19b6b2477c6eaf2bbb
https://git.kernel.org/stable/c/b35f6c031b87d9e51f141ff6de0ea59756a8e313

History

Thu, 18 Sep 2025 13:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() If share is , share->path is NULL and it cause NULL pointer dereference issue.
Title		ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
References		https://git.kernel.org/stable/c/1636e09779f83e10e6ed57d91ef94abcefdd206b https://git.kernel.org/stable/c/227eb2689b44d0d60da3839b146983e73435924c https://git.kernel.org/stable/c/3ac00a2ab69b34189942afa9e862d5170cdcb018 https://git.kernel.org/stable/c/a70751dd7b60eab025e97e19b6b2477c6eaf2bbb https://git.kernel.org/stable/c/b35f6c031b87d9e51f141ff6de0ea59756a8e313

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-18T13:33:39.575Z

Updated: 2025-09-18T13:33:39.575Z

Reserved: 2025-09-17T14:54:09.738Z

Link: CVE-2023-53399

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-09-18T14:15:43.177

Modified: 2025-09-18T14:15:43.177

Link: CVE-2023-53399

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-53399", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-09-17T14:54:09.738Z", "datePublished": "2025-09-18T13:33:39.575Z", "dateUpdated": "2025-09-18T13:33:39.575Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-09-18T13:33:39.575Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()\n\nIf share is , share->path is NULL and it cause NULL pointer\ndereference issue."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ksmbd/smb2pdu.c"], "versions": [{"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "227eb2689b44d0d60da3839b146983e73435924c", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "a70751dd7b60eab025e97e19b6b2477c6eaf2bbb", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "b35f6c031b87d9e51f141ff6de0ea59756a8e313", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "1636e09779f83e10e6ed57d91ef94abcefdd206b", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "3ac00a2ab69b34189942afa9e862d5170cdcb018", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ksmbd/smb2pdu.c"], "versions": [{"version": "5.15.111", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.28", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.2.15", "lessThanOrEqual": "6.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.3.2", "lessThanOrEqual": "6.3.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.4", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.15.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.1.28"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.2.15"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.3.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.4"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/227eb2689b44d0d60da3839b146983e73435924c"}, {"url": "https://git.kernel.org/stable/c/a70751dd7b60eab025e97e19b6b2477c6eaf2bbb"}, {"url": "https://git.kernel.org/stable/c/b35f6c031b87d9e51f141ff6de0ea59756a8e313"}, {"url": "https://git.kernel.org/stable/c/1636e09779f83e10e6ed57d91ef94abcefdd206b"}, {"url": "https://git.kernel.org/stable/c/3ac00a2ab69b34189942afa9e862d5170cdcb018"}], "title": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()", "x_generator": {"engine": "bippy-1.2.0"}}}}