by Kastro
Paper/Archive/CVE-2024-35865

CVE-2024-35865

Linux Linux — smb: client: fix potential UAF in smb2_is_valid_oplock_break()

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.3.503 × 2010.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected

ProductAffectedFixed inSource
Linux7f48558e6489d032b1584b0cc9ac4bb11072c034 – < a710ef9e974f18232d2b9b19c90eda1a1167b2d4a710ef9e974f18232d2b9b19c90eda1a1167b2d4CNA
Linux7f48558e6489d032b1584b0cc9ac4bb11072c034 – < 84488466b7a69570bdbf76dd9576847ab97d54e784488466b7a69570bdbf76dd9576847ab97d54e7CNA
Linux7f48558e6489d032b1584b0cc9ac4bb11072c034 – < 21fed37d2bdcde33453faf61d3d4d96c355f04bd21fed37d2bdcde33453faf61d3d4d96c355f04bdCNA
Linux7f48558e6489d032b1584b0cc9ac4bb11072c034 – < 3dba0e5276f131e36d6d8043191d856f492386283dba0e5276f131e36d6d8043191d856f49238628CNA
Linux7f48558e6489d032b1584b0cc9ac4bb11072c034 – < 22863485a4626ec6ecf297f4cc0aef709bc862e422863485a4626ec6ecf297f4cc0aef709bc862e4CNA
Linuxa67172a013953664b1dad03c648200c70b90506c–CNA
Linux3.12.48 – < 3.133.13CNA
Linux3.13–CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgit.kernel.org/stable/c/a710ef9e974f18232d2b9b19c90eda1a1167b2d4refgit.kernel.org/stable/c/84488466b7a69570bdbf76dd9576847ab97d54e7refgit.kernel.org/stable/c/21fed37d2bdcde33453faf61d3d4d96c355f04bdrefgit.kernel.org/stable/c/3dba0e5276f131e36d6d8043191d856f49238628refgit.kernel.org/stable/c/22863485a4626ec6ecf297f4cc0aef709bc862e4