CVE-2024-35865

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

State: Published
Severity: 9.8 Critical
Published: May 19, 2024
Updated: Aug 5, 2026
Reserved: May 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7f48558e6489d032b1584b0cc9ac4bb11072c034 to before a710ef9e974f18232d2b9b19c90eda1a1167b2d4Affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 84488466b7a69570bdbf76dd9576847ab97d54e7Affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 21fed37d2bdcde33453faf61d3d4d96c355f04bdAffected 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 3dba0e5276f131e36d6d8043191d856f49238628Affected 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 22863485a4626ec6ecf297f4cc0aef709bc862e4Affected a67172a013953664b1dad03c648200c70b90506cAffected 3.12.48 to before 3.13Affected
LinuxLinux	3.13Affected before 3.13Not affected 5.15.209 through 5.15.Not affected 6.1.85 through 6.1.Not affected 6.6.26 through 6.6.Not affected 6.8.5 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

7f48558e6489d032b1584b0cc9ac4bb11072c034 to before a710ef9e974f18232d2b9b19c90eda1a1167b2d4Affected
7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 84488466b7a69570bdbf76dd9576847ab97d54e7Affected
7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 21fed37d2bdcde33453faf61d3d4d96c355f04bdAffected
7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 3dba0e5276f131e36d6d8043191d856f49238628Affected
7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 22863485a4626ec6ecf297f4cc0aef709bc862e4Affected
a67172a013953664b1dad03c648200c70b90506cAffected
3.12.48 to before 3.13Affected

LinuxLinux

3.13Affected
before 3.13Not affected
5.15.209 through 5.15.*Not affected
6.1.85 through 6.1.*Not affected
6.6.26 through 6.6.*Not affected
6.8.5 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.