CVE-2024-46742

Summary

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL.

Fix this by check if 'lease_ctx_info' is NULL.

Additionally, remove the redundant parentheses in parse_durable_handle_context().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < 878f32878351104448b86ef5b85d1f8ed6f599fbaffected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < ec28c35029b7930f31117f9284874b63bea4f31baffected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < 07f384c5be1f8633b13f0a22616e227570450bc6affected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < 3b692794b81f2ecad69a4adbba687f3836824adaaffected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < 4e8771a3666c8f216eefd6bd2fd50121c6c437dbaffected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux5.15.181 <= 5.15.*unaffected
LinuxLinux6.1.135 <= 6.1.*unaffected
LinuxLinux6.6.51 <= 6.6.*unaffected
LinuxLinux6.10.10 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References