by Kastro CVE-2024-26592
Linux Linux — ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function.
Affected
ProductAffectedFixed inSource
Linuxa848c4f15ab6d5d405dbee7de5da71839b2bf35e – < 999daf367b924fdf14e9d83e034ee0f86bc17ec6999daf367b924fdf14e9d83e034ee0f86bc17ec6CNA
Linuxa848c4f15ab6d5d405dbee7de5da71839b2bf35e – < 380965e48e9c32ee4263c023e1d830ea7e462ed1380965e48e9c32ee4263c023e1d830ea7e462ed1CNA
Linuxa848c4f15ab6d5d405dbee7de5da71839b2bf35e – < 24290ba94cd0136e417283b0dbf8fcdabcf6211124290ba94cd0136e417283b0dbf8fcdabcf62111CNA
Linuxa848c4f15ab6d5d405dbee7de5da71839b2bf35e – < 69d54650b751532d1e1613a4fb433e591aeef12669d54650b751532d1e1613a4fb433e591aeef126CNA
Linuxa848c4f15ab6d5d405dbee7de5da71839b2bf35e – < 38d20c62903d669693a1869aa68c4dd5674e254438d20c62903d669693a1869aa68c4dd5674e2544CNA
Linux5.155.15.149CNA
linux_kernel5.15–CISA-ADP
linux_kernela848c4f15ab6 – < 999daf367b92999daf367b92CISA-ADP
linux_kernela848c4f15ab6 – < 380965e48e9c380965e48e9cCISA-ADP
linux_kernela848c4f15ab6 – < 24290ba94cd024290ba94cd0CISA-ADP
linux_kernela848c4f15ab6 – < 69d54650b75169d54650b751CISA-ADP
linux_kernela848c4f15ab6 – < 38d20c62903d38d20c62903dCISA-ADP
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total