← CVE Intelligence

CVE-2024-35861

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected dca65818c80cf06e0f08ba2cf94060a5236e73c2 before 7e8360ac8774e19b0b25f44fff84a105bb2417e4; affected dca65818c80cf06e0f08ba2cf94060a5236e73c2 before 2cfff21732132e363b4cc275d63ea98f1af726c1; affected dca65818c80cf06e0f08ba2cf94060a5236e73c2 before f9a96a7ad1e8d25dc6662bc7552e0752de74a20d; affected dca65818c80cf06e0f08ba2cf94060a5236e73c2 before e0e50401cc3921c9eaf1b0e667db174519ea939f; affected dd9ccff8c8980bf9ea7f25e83eeb28154f902920; affected 5.17.2 before 5.18
Linux / Linuxaffected 5.18; unaffected 0 before 5.18; unaffected 6.1.85 through 6.1.*; unaffected 6.6.26 through 6.6.*; unaffected 6.8.5 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.