CVE-2024-56729

Summary

In the Linux kernel, the following vulnerability has been resolved:

smb: Initialize cfid->tcon before performing network ops

Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cached_dir_lease_break() and then fail to release the ref in cached_dir_offload_close, since cfid->tcon is still NULL.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxebe98f1447bbccf8228335c62d86af02a0ed23f7 < 625e2357c8fcfae6e66dcc667dc656fe390bab15affected
LinuxLinuxebe98f1447bbccf8228335c62d86af02a0ed23f7 < 4b216c8f9c7d84ef7de33ca60b97e08e03ef3292affected
LinuxLinuxebe98f1447bbccf8228335c62d86af02a0ed23f7 < 1b9ab6b648f89441c8a13cb3fd8ca83ffebc5262affected
LinuxLinuxebe98f1447bbccf8228335c62d86af02a0ed23f7 < c353ee4fb119a2582d0e011f66a76a38f5cf984daffected
LinuxLinux6.1affected
LinuxLinux0 < 6.1unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References