Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1bb56810677f26b78d57a3038054943efd334a1c before d798fd98e3563027c5162259ead517057d6fa794; affected 1bb56810677f26b78d57a3038054943efd334a1c before f4a60d360d9114b5085701a3702a0102b0d6d846; affected 1bb56810677f26b78d57a3038054943efd334a1c before 10e17ca4000ec34737bde002a13435c38ace2682; affected 1bb56810677f26b78d57a3038054943efd334a1c before 3103163ccd3be4adcfa37e15608fb497be044113; affected 1bb56810677f26b78d57a3038054943efd334a1c before 58acd1f497162e7d282077f816faa519487be045 |
| Linux / Linux | affected 5.13; unaffected 0 before 5.13; unaffected 5.15.181 through 5.15.*; unaffected 6.1.132 through 6.1.*; unaffected 6.6.26 through 6.6.*; unaffected 6.8.5 through 6.8.*; unaffected 6.9 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/d798fd98e3563027c5162259ead517057d6fa794
- https://git.kernel.org/stable/c/f4a60d360d9114b5085701a3702a0102b0d6d846
- https://git.kernel.org/stable/c/10e17ca4000ec34737bde002a13435c38ace2682
- https://git.kernel.org/stable/c/3103163ccd3be4adcfa37e15608fb497be044113
- https://git.kernel.org/stable/c/58acd1f497162e7d282077f816faa519487be045
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.