CVE-2024-35863

Summary

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in is_valid_oplock_break()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7f48558e6489d032b1584b0cc9ac4bb11072c034 < 494c91e1e9413b407d12166a61b84200d4d54facaffected
LinuxLinux7f48558e6489d032b1584b0cc9ac4bb11072c034 < 0a15ba88a32fa7a516aff7ffd27befed5334dff2affected
LinuxLinux7f48558e6489d032b1584b0cc9ac4bb11072c034 < 16d58c6a7db5050b9638669084b63fc05f951825affected
LinuxLinux7f48558e6489d032b1584b0cc9ac4bb11072c034 < 69ccf040acddf33a3a85ec0f6b45ef84b0f7ec29affected
LinuxLinuxa67172a013953664b1dad03c648200c70b90506caffected
LinuxLinux3.12.48 < 3.13affected
LinuxLinux3.13affected
LinuxLinux0 < 3.13unaffected
LinuxLinux6.1.85 <= 6.1.*unaffected
LinuxLinux6.6.26 <= 6.6.*unaffected
LinuxLinux6.8.5 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References