← CVE Intelligence

CVE-2024-26928

smb: client: fix potential UAF in cifs_debug_files_proc_show() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 before 8f8718afd446cd4ea3b62bacc3eec09f8aae85ee; affected dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 before a140224bcf87eb98a87b67ff4c6826c57e47b704; affected dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 before 229042314602db62559ecacba127067c22ee7b88; affected dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 before a65f2b56334ba4dc30bd5ee9ce5b2691b973344d; affected dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 before 3402faf78b2516b0af1259baff50cc8453ef0bd1; affected dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 before ca545b7f0823f19db0f1148d59bc5e1a56634502
Linux / Linuxaffected 4.20; unaffected 0 before 4.20; unaffected 5.10.237 through 5.10.*; unaffected 5.15.180 through 5.15.*; unaffected 6.1.85 through 6.1.*; unaffected 6.6.26 through 6.6.*; unaffected 6.8.5 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.