CVE-2023-53597

CVE-2023-53597 affects the Linux kernel CIFS code: after STATUS_IO_TIMEOUTs exceed NUM_STATUS_IO_TIMEOUT, reconnection could leak mids and corrupt server->in_flight; the patch relocates the MID-return/credit handling to after decrypting the response (including transform-header paths), and expa...

kernel: cifs: fix mid leak during reconnection after timeout threshold

In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUSIOTIMEOUT exceeds a specified threshold NUMSTATUSIOTIMEOUT, we reconnect the connection. But we do not return the mi...