← CVE Intelligence

CVE-2024-35863

smb: client: fix potential UAF in is_valid_oplock_break() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in is_valid_oplock_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 494c91e1e9413b407d12166a61b84200d4d54fac; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 0a15ba88a32fa7a516aff7ffd27befed5334dff2; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 16d58c6a7db5050b9638669084b63fc05f951825; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 69ccf040acddf33a3a85ec0f6b45ef84b0f7ec29; affected a67172a013953664b1dad03c648200c70b90506c; affected 3.12.48 before 3.13
Linux / Linuxaffected 3.13; unaffected 0 before 3.13; unaffected 6.1.85 through 6.1.*; unaffected 6.6.26 through 6.6.*; unaffected 6.8.5 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.