Riskcovery

CVE-2024-35998

smb3: fix lock ordering potential deadlock in cifs_sync_mid_result

State
Published
Severity
7.5 High
Published
May 20, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb3: fix lock ordering potential deadlock in cifs_sync_mid_result

Coverity spotted that the cifs_sync_mid_result function could deadlock

"Thread deadlock (ORDER_REVERSAL) lock_order: Calling spin_lock acquires lock TCP_Server_Info.srv_lock while holding lock TCP_Server_Info.mid_lock"

Addresses-Coverity: 1590401 ("Thread deadlock (ORDER_REVERSAL)")

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 64d62ac6d6514cba1305bd08e271ec1843bdd612 to before c7a4bca289e50bb4b2650f845c41bb3e453f4c66Affected
  • 90c49fce1c43e1cc152695e20363ff5087897c09 to before 699f8958dece132709c0bff6a9700999a2a63b75Affected
  • 90c49fce1c43e1cc152695e20363ff5087897c09 to before 8248224ab5b8ca7559b671917c224296a4d671fcAffected
  • 90c49fce1c43e1cc152695e20363ff5087897c09 to before 8861fd5180476f45f9e8853db154600469a0284fAffected
  • c511954bf142fe1995aec3c739a9f1a76990283aAffected
  • 0b08c4c499200be67d54c439d56e5ea866869945Affected
  • 6.1.28 to before 6.1.90Affected
  • 6.2.15 to before 6.3Affected
  • 6.3.2 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.1.90 through 6.1.*Not affected
  • 6.6.30 through 6.6.*Not affected
  • 6.8.9 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.