← CVE Intelligence

CVE-2024-26592

ksmbd: fix UAF issue in ksmbd_tcp_new_connection() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected a848c4f15ab6d5d405dbee7de5da71839b2bf35e before 999daf367b924fdf14e9d83e034ee0f86bc17ec6; affected a848c4f15ab6d5d405dbee7de5da71839b2bf35e before 380965e48e9c32ee4263c023e1d830ea7e462ed1; affected a848c4f15ab6d5d405dbee7de5da71839b2bf35e before 24290ba94cd0136e417283b0dbf8fcdabcf62111; affected a848c4f15ab6d5d405dbee7de5da71839b2bf35e before 69d54650b751532d1e1613a4fb433e591aeef126; affected a848c4f15ab6d5d405dbee7de5da71839b2bf35e before 38d20c62903d669693a1869aa68c4dd5674e2544
Linux / Linuxaffected 5.15; unaffected 0 before 5.15; unaffected 5.15.149 through 5.15.*; unaffected 6.1.75 through 6.1.*; unaffected 6.6.14 through 6.6.*; unaffected 6.7.2 through 6.7.*; unaffected 6.8 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.