Riskcovery

CVE-2024-46736

smb: client: fix double put of @cfile in smb2_rename_path()

State
Published
Severity
9.8 Critical
Published
Sep 18, 2024
Updated
Aug 5, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix double put of @cfile in smb2_rename_path()

If smb2_set_path_attr() is called with a valid @cfile and returned -EINVAL, we need to call cifs_get_writable_path() again as the reference of @cfile was already dropped by previous smb2_compound_op() call.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1e60bc0e954389af82f1d9a85f13a63f6572350f to before b27ea9c96efd2c252a981fb00d0f001b86c90f3eAffected
  • 71f15c90e785d1de4bcd65a279e7256684c25c0d to before 1a46c7f6546b73cbf36f5a618a1a6bbb45391eb3Affected
  • 71f15c90e785d1de4bcd65a279e7256684c25c0d to before 3523a3df03c6f04f7ea9c2e7050102657e331a4fAffected
  • 6.6.32 to before 6.6.51Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.