CVE-2024-39468

smb: client: fix deadlock in smb2_find_smb_tcon()

State: Published
Severity: 7.5 High
Published: Jun 25, 2024
Updated: Oct 15, 2026
Reserved: Jun 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix deadlock in smb2_find_smb_tcon()

Unlock cifs_tcp_ses_lock before calling cifs_put_smb_ses() to avoid such deadlock.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	78ebec450ef4f0720c592638d92bad679d75d7ce to before b055752675cd1d1db4ac9c2750db3dc3e89ea261Affected e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 21f5dd36e655d25a7b45b61c1e537198b671f720Affected e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before b09b556e48968317887a11243a5331a7bc00ece5Affected e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 225de871ddf994f69a57f035709cad9c0ab8615aAffected e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 8d0f5f1ccf675454a833a573c53830a49b7d1a47Affected e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 02c418774f76a0a36a6195c9dbf8971eb4130a15Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.162 through 5.15.Not affected 6.1.94 through 6.1.Not affected 6.6.34 through 6.6.Not affected 6.9.5 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

78ebec450ef4f0720c592638d92bad679d75d7ce to before b055752675cd1d1db4ac9c2750db3dc3e89ea261Affected
e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 21f5dd36e655d25a7b45b61c1e537198b671f720Affected
e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before b09b556e48968317887a11243a5331a7bc00ece5Affected
e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 225de871ddf994f69a57f035709cad9c0ab8615aAffected
e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 8d0f5f1ccf675454a833a573c53830a49b7d1a47Affected
e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 to before 02c418774f76a0a36a6195c9dbf8971eb4130a15Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.162 through 5.15.*Not affected
6.1.94 through 6.1.*Not affected
6.6.34 through 6.6.*Not affected
6.9.5 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.