Riskcovery

CVE-2024-35869

smb: client: guarantee refcounted children from parent session

State
Published
Severity
9.8 Critical
Published
May 19, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: guarantee refcounted children from parent session

Avoid potential use-after-free bugs when walking DFS referrals, mounting and performing DFS failover by ensuring that all children from parent @tcon->ses are also refcounted. They're all needed across the entire DFS mount. Get rid of @tcon->dfs_ses_list while we're at it, too.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 8e3554150d6c80a84b3cb046615d1a0e943811dc to before 645f332c6b63499cc76197f9b6bffcc659ba64ccAffected
  • 8e3554150d6c80a84b3cb046615d1a0e943811dc to before e1db9ae87b7148c021daee1fcc4bc71b2ac58a79Affected
  • 8e3554150d6c80a84b3cb046615d1a0e943811dc to before 062a7f0ff46eb57aff526897bd2bebfdb1d3046aAffected
  • f30d226bcc9f0e2d97b4a6e94c43a28148fbeab6Affected
  • c082c3be0f96e759ff2e361d929832fda0b93851Affected
  • 6.2.15 to before 6.3Affected
  • 6.3.2 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.29 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.