Riskcovery

CVE-2024-35862

smb: client: fix potential UAF in smb2_is_network_name_deleted()

State
Published
Severity
9.8 Critical
Published
May 19, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in smb2_is_network_name_deleted()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9e550b085206544bd03a8b1dd58a5414e9508351 to before f9414004798d9742c1af23a1d839fe6a9503751cAffected
  • 9e550b085206544bd03a8b1dd58a5414e9508351 to before aa582b33f94453fdeaff1e7d0aa252c505975e01Affected
  • 9e550b085206544bd03a8b1dd58a5414e9508351 to before d919b6ea15ffa56fbafef4a1d92f47aeda9af645Affected
  • 9e550b085206544bd03a8b1dd58a5414e9508351 to before 63981561ffd2d4987807df4126f96a11e18b0c1dAffected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 6.1.85 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.