Riskcovery

CVE-2024-35866

smb: client: fix potential UAF in cifs_dump_full_key()

State
Published
Severity
Not scored
Published
May 19, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in cifs_dump_full_key()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1bb56810677f26b78d57a3038054943efd334a1c to before d798fd98e3563027c5162259ead517057d6fa794Affected
  • 1bb56810677f26b78d57a3038054943efd334a1c to before f4a60d360d9114b5085701a3702a0102b0d6d846Affected
  • 1bb56810677f26b78d57a3038054943efd334a1c to before 10e17ca4000ec34737bde002a13435c38ace2682Affected
  • 1bb56810677f26b78d57a3038054943efd334a1c to before 3103163ccd3be4adcfa37e15608fb497be044113Affected
  • 1bb56810677f26b78d57a3038054943efd334a1c to before 58acd1f497162e7d282077f816faa519487be045Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.132 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.