← CVE Intelligence

CVE-2024-35869

smb: client: guarantee refcounted children from parent session PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-free bugs when walking DFS referrals, mounting and performing DFS failover by ensuring that all children from parent @tcon->ses are also refcounted. They're all needed across the entire DFS mount. Get rid of @tcon->dfs_ses_list while we're at it, too.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 8e3554150d6c80a84b3cb046615d1a0e943811dc before 645f332c6b63499cc76197f9b6bffcc659ba64cc; affected 8e3554150d6c80a84b3cb046615d1a0e943811dc before e1db9ae87b7148c021daee1fcc4bc71b2ac58a79; affected 8e3554150d6c80a84b3cb046615d1a0e943811dc before 062a7f0ff46eb57aff526897bd2bebfdb1d3046a; affected f30d226bcc9f0e2d97b4a6e94c43a28148fbeab6; affected c082c3be0f96e759ff2e361d929832fda0b93851; affected 6.2.15 before 6.3; affected 6.3.2 before 6.4
Linux / Linuxaffected 6.4; unaffected 0 before 6.4; unaffected 6.6.29 through 6.6.*; unaffected 6.8.5 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.