AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-5345

HIGH · CVSS 7.8 EPSS 0.47% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-10-03 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects Linux. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
External Security References

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-5345
Severity
HIGH
CVSS
7.8
EPSS
0.47%
Linux

Original NVD Description

A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.

Related CVEs

Other vulnerabilities affecting the same vendor(s)