Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 838ec01ea8d3deb5d123e8ed9022e8162dc3f503; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before bb6570085826291dc392005f9fec16ea5da3c8ad; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 16b7d785775eb03929766819415055e367398f49; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before c3cf8b74c57924c0985e49a1fdf02d3395111f39; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 1e12f0d5c66f07c934041621351973a116fa13c7; affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 0865ffefea197b437ba78b5dd8d8e256253efd65; affected a67172a013953664b1dad03c648200c70b90506c; affected 3.12.48 before 3.13 |
| Linux / Linux | affected 3.13; unaffected 0 before 3.13; unaffected 5.10.237 through 5.10.*; unaffected 5.15.181 through 5.15.*; unaffected 6.1.85 through 6.1.*; unaffected 6.6.26 through 6.6.*; unaffected 6.8.5 through 6.8.*; unaffected 6.9 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/838ec01ea8d3deb5d123e8ed9022e8162dc3f503
- https://git.kernel.org/stable/c/bb6570085826291dc392005f9fec16ea5da3c8ad
- https://git.kernel.org/stable/c/16b7d785775eb03929766819415055e367398f49
- https://git.kernel.org/stable/c/c3cf8b74c57924c0985e49a1fdf02d3395111f39
- https://git.kernel.org/stable/c/1e12f0d5c66f07c934041621351973a116fa13c7
- https://git.kernel.org/stable/c/0865ffefea197b437ba78b5dd8d8e256253efd65
ADP enrichment
No English description supplied.
- https://git.kernel.org/stable/c/16b7d785775eb03929766819415055e367398f49
- https://git.kernel.org/stable/c/c3cf8b74c57924c0985e49a1fdf02d3395111f39
- https://git.kernel.org/stable/c/1e12f0d5c66f07c934041621351973a116fa13c7
- https://git.kernel.org/stable/c/0865ffefea197b437ba78b5dd8d8e256253efd65
- http://www.openwall.com/lists/oss-security/2024/05/30/2
- http://www.openwall.com/lists/oss-security/2024/05/30/1
- http://www.openwall.com/lists/oss-security/2024/05/29/2
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
No English description supplied.
No references supplied.