Riskcovery

CVE-2024-35868

smb: client: fix potential UAF in cifs_stats_proc_write()

State
Published
Severity
Not scored
Published
May 19, 2024
Updated
May 23, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in cifs_stats_proc_write()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 8fefd166fcb368c5fcf48238e3f7c8af829e0a72Affected
  • 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before cf03020c56d3ed28c4942280957a007b5e9544f7Affected
  • 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before 5b5475ce69f02ecc1b13ea23106e5b89c690429bAffected
  • 7f48558e6489d032b1584b0cc9ac4bb11072c034 to before d3da25c5ac84430f89875ca7485a3828150a7e0aAffected
  • a67172a013953664b1dad03c648200c70b90506cAffected
  • 3.12.48 to before 3.13Affected
LinuxLinux
  • 3.13Affected
  • before 3.13Not affected
  • 6.1.85 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.