← CVE Intelligence

CVE-2024-46742

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL. Fix this by check if 'lease_ctx_info' is NULL. Additionally, remove the redundant parentheses in parse_durable_handle_context().

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 0626e6641f6b467447c81dd7678a69c66f7746cf before 878f32878351104448b86ef5b85d1f8ed6f599fb; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before ec28c35029b7930f31117f9284874b63bea4f31b; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 07f384c5be1f8633b13f0a22616e227570450bc6; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 3b692794b81f2ecad69a4adbba687f3836824ada; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 4e8771a3666c8f216eefd6bd2fd50121c6c437db
Linux / Linuxaffected 5.15; unaffected 0 before 5.15; unaffected 5.15.181 through 5.15.*; unaffected 6.1.135 through 6.1.*; unaffected 6.6.51 through 6.6.*; unaffected 6.10.10 through 6.10.*; unaffected 6.11 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.