Riskcovery

CVE-2024-26928

smb: client: fix potential UAF in cifs_debug_files_proc_show()

State
Published
Severity
Not scored
Published
Apr 28, 2024
Updated
May 11, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in cifs_debug_files_proc_show()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 to before 8f8718afd446cd4ea3b62bacc3eec09f8aae85eeAffected
  • dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 to before a140224bcf87eb98a87b67ff4c6826c57e47b704Affected
  • dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 to before 229042314602db62559ecacba127067c22ee7b88Affected
  • dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 to before a65f2b56334ba4dc30bd5ee9ce5b2691b973344dAffected
  • dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 to before 3402faf78b2516b0af1259baff50cc8453ef0bd1Affected
  • dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075 to before ca545b7f0823f19db0f1148d59bc5e1a56634502Affected
LinuxLinux
  • 4.20Affected
  • before 4.20Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.180 through 5.15.*Not affected
  • 6.1.85 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.