A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL leading to an invalid pointer request.

🗓️ 29 May 2023 07:00:00Reported by MicrosoftType

Linux kernel use-after-free in reconn_set_ipaddr_from_hostname when server->hostname is not NULL.

Reporter	Title	Published	Views	Family All 379
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux kernel, libssh, and Java can affect IBM Spectrum Protect Plus	22 Aug 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Storage Scale System	12 Dec 202311:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	28 Jul 202315:34	–	ibm
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2023-012 (ALASKERNEL-5.15-2023-012)	24 Jan 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : kernel-rt (ALSA-2023:2148)	14 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : kernel (ALSA-2023:2458)	14 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel-rt (ALSA-2023:2736)	20 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2023:2951)	20 May 202300:00	–	nessus
Tenable Nessus	MiracleLinux 9 : kernel-5.14.0-284.11.1.el9_2 (AXSA:2023-5567:15)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : kernel-4.18.0-477.10.1.el8_8 (AXSA:2023-5865:16)	20 Jan 202600:00	–	nessus