CVE-2024-35861

Summary

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxdca65818c80cf06e0f08ba2cf94060a5236e73c2 < 7e8360ac8774e19b0b25f44fff84a105bb2417e4affected
LinuxLinuxdca65818c80cf06e0f08ba2cf94060a5236e73c2 < 2cfff21732132e363b4cc275d63ea98f1af726c1affected
LinuxLinuxdca65818c80cf06e0f08ba2cf94060a5236e73c2 < f9a96a7ad1e8d25dc6662bc7552e0752de74a20daffected
LinuxLinuxdca65818c80cf06e0f08ba2cf94060a5236e73c2 < e0e50401cc3921c9eaf1b0e667db174519ea939faffected
LinuxLinuxdd9ccff8c8980bf9ea7f25e83eeb28154f902920affected
LinuxLinux5.17.2 < 5.18affected
LinuxLinux5.18affected
LinuxLinux0 < 5.18unaffected
LinuxLinux6.1.85 <= 6.1.*unaffected
LinuxLinux6.6.26 <= 6.6.*unaffected
LinuxLinux6.8.5 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References