CVE-2023-5345

HIGH

Linux Kernel 6.0.16-6.1.56 - Use-After-Free in SMB Client fs/smb/client

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-5345. PoCs published by aouadjaout.

AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2023-5345, a double-free vulnerability in the Linux kernel 6.1.52. The harness demonstrates the vulnerability by triggering a double-free in the SMB3 filesystem context, which can lead to privilege escalation.

Description

A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.

Exploits (1)

gitlab WORKING POC
by aouadjaout · poc
https://gitlab.com/aouadjaout/cve-2023-5345

This repository contains a functional exploit PoC for CVE-2023-5345, a double-free vulnerability in the Linux kernel 6.1.52. The harness demonstrates the vulnerability by triggering a double-free in the SMB3 filesystem context, which can lead to privilege escalation.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: Linux kernel 6.1.52
No auth needed
Prerequisites: Linux kernel 6.1.52 · Mopsa static analysis tool
devstral-2 · analyzed Feb 23, 2026 Full analysis →

References (6)

Core 6

Scores

CVSS v3 7.8
EPSS 0.0047
EPSS Percentile 36.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (5)
fedoraproject/fedora 37
fedoraproject/fedora 38
fedoraproject/fedora 39
linux/linux_kernel 6.6 rc1 (3 CPE variants)
linux/linux_kernel 6.0.16 - 6.1.56
Published Oct 03, 2023
Tracked Since Feb 18, 2026