CVE-2023-52757

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> smb: client: fix potential deadlock when releasing mids<br /> <br /> All release_mid() callers seem to hold a reference of @mid so there is<br /> no need to call kref_put(&amp;mid-&gt;refcount, __release_mid) under<br /> @server-&gt;mid_lock spinlock. If they don&amp;#39;t, then an use-after-free bug<br /> would have occurred anyways.<br /> <br /> By getting rid of such spinlock also fixes a potential deadlock as<br /> shown below<br /> <br /> CPU 0 CPU 1<br /> ------------------------------------------------------------------<br /> cifs_demultiplex_thread() cifs_debug_data_proc_show()<br /> release_mid()<br /> spin_lock(&amp;server-&gt;mid_lock);<br /> spin_lock(&amp;cifs_tcp_ses_lock)<br /> spin_lock(&amp;server-&gt;mid_lock)<br /> __release_mid()<br /> smb2_find_smb_tcon()<br /> spin_lock(&amp;cifs_tcp_ses_lock) *deadlock*