CVE-2024-42307

cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path

State: Published
Severity: Not scored
Published: Aug 17, 2024
Updated: May 23, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path

Dan Carpenter reported a Smack static checker warning: fs/smb/client/cifsfs.c:1981 init_cifs() error: we previously assumed 'serverclose_wq' could be null (see line 1895)

The patch which introduced the serverclose workqueue used the wrong oredering in error paths in init_cifs() for freeing it on errors.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8c99dfb49bdc17edffc7ff3d46b400c8c291686c to before 6018971710fdc7739f8655c1540832b4bb903671Affected 6f17163b9339fac92023a1d9bef22128db3b9a4b to before 160235efb4f9b55212dedff5de0094c606c4b303Affected 173217bd73365867378b5e75a86f0049e1069ee8 to before 3739d711246d8fbc95ff73dbdace9741cdce4777Affected 173217bd73365867378b5e75a86f0049e1069ee8 to before 193cc89ea0ca1da311877d2b4bb5e9f03bcc82a2Affected 40a5d14c9d3b585d55d3209fb5efe202dcaac926Affected 6.1.85 to before 6.1.103Affected 6.6.26 to before 6.6.44Affected 6.8.5 to before 6.9Affected
LinuxLinux	6.9Affected before 6.9Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

8c99dfb49bdc17edffc7ff3d46b400c8c291686c to before 6018971710fdc7739f8655c1540832b4bb903671Affected
6f17163b9339fac92023a1d9bef22128db3b9a4b to before 160235efb4f9b55212dedff5de0094c606c4b303Affected
173217bd73365867378b5e75a86f0049e1069ee8 to before 3739d711246d8fbc95ff73dbdace9741cdce4777Affected
173217bd73365867378b5e75a86f0049e1069ee8 to before 193cc89ea0ca1da311877d2b4bb5e9f03bcc82a2Affected
40a5d14c9d3b585d55d3209fb5efe202dcaac926Affected
6.1.85 to before 6.1.103Affected
6.6.26 to before 6.6.44Affected
6.8.5 to before 6.9Affected

LinuxLinux

6.9Affected
before 6.9Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.