{"api_version":"1","generated_at":"2026-04-22T23:52:30+00:00","cve":"CVE-2023-5345","urls":{"html":"https://cve.report/CVE-2023-5345","api":"https://cve.report/api/cve/CVE-2023-5345.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-5345","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-5345"},"summary":{"title":"CVE-2023-5345","description":"A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.\n\nIn case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.\n\nWe recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.","state":"PUBLIC","assigner":"security@google.com","published_at":"2023-10-03 03:15:00","updated_at":"2023-10-24 17:51:00"},"problem_types":["CWE-416"],"metrics":[],"references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e6e43b8aa7cd3c3af686caf0c2e11819a886d705","name":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e6e43b8aa7cd3c3af686caf0c2e11819a886d705","refsource":"MISC","tags":[],"title":"kernel/git/torvalds/linux.git - Linux kernel source tree","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/","refsource":"MISC","tags":[],"title":"[SECURITY] Fedora 38 Update: kernel-6.5.6-200.fc38 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/","refsource":"MISC","tags":[],"title":"[SECURITY] Fedora 37 Update: kernel-6.5.6-100.fc37 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/","refsource":"MISC","tags":[],"title":"[SECURITY] Fedora 39 Update: kernel-6.5.6-300.fc39 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://kernel.dance/e6e43b8aa7cd3c3af686caf0c2e11819a886d705","name":"https://kernel.dance/e6e43b8aa7cd3c3af686caf0c2e11819a886d705","refsource":"MISC","tags":[],"title":"","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5345","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5345","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"5345","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"5345","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"38","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"5345","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"39","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"5345","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"5345","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"6.6","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"5345","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"6.6","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"5345","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"6.6","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2023-5345","qid":"161236","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-13047)"},{"cve":"CVE-2023-5345","qid":"161256","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-7749)"},{"cve":"CVE-2023-5345","qid":"199881","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6461-1)"},{"cve":"CVE-2023-5345","qid":"199933","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6502-1)"},{"cve":"CVE-2023-5345","qid":"199938","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6503-1)"},{"cve":"CVE-2023-5345","qid":"199952","title":"Ubuntu Security Notification for Linux kernel (Oracle) Vulnerabilities (USN-6502-2)"},{"cve":"CVE-2023-5345","qid":"199957","title":"Ubuntu Security Notification for Linux kernel (StarFive) Vulnerabilities (USN-6520-1)"},{"cve":"CVE-2023-5345","qid":"199958","title":"Ubuntu Security Notification for Linux kernel (NVIDIA) Vulnerabilities (USN-6502-3)"},{"cve":"CVE-2023-5345","qid":"199973","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6502-4)"},{"cve":"CVE-2023-5345","qid":"199982","title":"Ubuntu Security Notification for Linux kernel (GCP) Vulnerability (USN-6537-1)"},{"cve":"CVE-2023-5345","qid":"200074","title":"Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-6607-1)"},{"cve":"CVE-2023-5345","qid":"242561","title":"Red Hat Update for kpatch-patch (RHSA-2023:7734)"},{"cve":"CVE-2023-5345","qid":"242575","title":"Red Hat Update for kernel (RHSA-2023:7749)"},{"cve":"CVE-2023-5345","qid":"284598","title":"Fedora Security Update for kernel (FEDORA-2023-50bd7c9c12)"},{"cve":"CVE-2023-5345","qid":"284599","title":"Fedora Security Update for kernel (FEDORA-2023-830d9ec624)"},{"cve":"CVE-2023-5345","qid":"285211","title":"Fedora Security Update for kernel (FEDORA-2023-c3bb819677)"},{"cve":"CVE-2023-5345","qid":"356530","title":"Amazon Linux Security Advisory for kernel : ALAS2023-2023-385"},{"cve":"CVE-2023-5345","qid":"6140013","title":"AWS Bottlerocket Security Update for kernel (GHSA-868r-x68r-5c5p)"},{"cve":"CVE-2023-5345","qid":"6140175","title":"AWS Bottlerocket Security Update for kernel (GHSA-868r-x68r-5c5p)"},{"cve":"CVE-2023-5345","qid":"755059","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4035-1)"},{"cve":"CVE-2023-5345","qid":"755082","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4058-1)"},{"cve":"CVE-2023-5345","qid":"755083","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4057-1)"},{"cve":"CVE-2023-5345","qid":"755085","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4072-1)"},{"cve":"CVE-2023-5345","qid":"755086","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4071-1)"},{"cve":"CVE-2023-5345","qid":"755096","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4093-1)"},{"cve":"CVE-2023-5345","qid":"755229","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4072-2)"},{"cve":"CVE-2023-5345","qid":"755399","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5) (SUSE-SU-2023:4775-1)"},{"cve":"CVE-2023-5345","qid":"755401","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5) (SUSE-SU-2023:4766-1)"},{"cve":"CVE-2023-5345","qid":"755413","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 18 for SLE 15 SP4) (SUSE-SU-2023:4801-1)"},{"cve":"CVE-2023-5345","qid":"755414","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:4805-1)"},{"cve":"CVE-2023-5345","qid":"755418","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 11 for SLE 15 SP4) (SUSE-SU-2023:4822-1)"},{"cve":"CVE-2023-5345","qid":"755420","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 2 for SLE 15 SP5) (SUSE-SU-2023:4841-1)"},{"cve":"CVE-2023-5345","qid":"755466","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 5 for SLE 15 SP5) (SUSE-SU-2023:4863-1)"},{"cve":"CVE-2023-5345","qid":"755470","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 3 for SLE 15 SP5) (SUSE-SU-2023:4848-1)"},{"cve":"CVE-2023-5345","qid":"755474","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 16 for SLE 15 SP4) (SUSE-SU-2023:4872-1)"},{"cve":"CVE-2023-5345","qid":"907538","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (31149-1)"},{"cve":"CVE-2023-5345","qid":"907578","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for hyperv-daemons (31730-1)"}]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2023-5345","ASSIGNER":"security@google.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.\n\nIn case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.\n\nWe recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.\n\n"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-416 Use After Free","cweId":"CWE-416"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Linux","product":{"product_data":[{"product_name":"Kernel","version":{"version_data":[{"version_affected":"<","version_name":"0.0","version_value":"6.6"}]}}]}}]}},"references":{"reference_data":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e6e43b8aa7cd3c3af686caf0c2e11819a886d705","refsource":"MISC","name":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e6e43b8aa7cd3c3af686caf0c2e11819a886d705"},{"url":"https://kernel.dance/e6e43b8aa7cd3c3af686caf0c2e11819a886d705","refsource":"MISC","name":"https://kernel.dance/e6e43b8aa7cd3c3af686caf0c2e11819a886d705"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/","refsource":"MISC","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/","refsource":"MISC","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/","refsource":"MISC","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/"}]},"generator":{"engine":"Vulnogram 0.1.0-dev"},"source":{"discovery":"EXTERNAL"},"impact":{"cvss":[{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}},"nvd":{"publishedDate":"2023-10-03 03:15:00","lastModifiedDate":"2023-10-24 17:51:00","problem_types":["CWE-416"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}