CVE-2024-46742

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

State: Published
Severity: Not scored
Published: Sep 18, 2024
Updated: May 11, 2026
Reserved: Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL.

Fix this by check if 'lease_ctx_info' is NULL.

Additionally, remove the redundant parentheses in parse_durable_handle_context().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before 878f32878351104448b86ef5b85d1f8ed6f599fbAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before ec28c35029b7930f31117f9284874b63bea4f31bAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 07f384c5be1f8633b13f0a22616e227570450bc6Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 3b692794b81f2ecad69a4adbba687f3836824adaAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 4e8771a3666c8f216eefd6bd2fd50121c6c437dbAffected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.181 through 5.15.Not affected 6.1.135 through 6.1.Not affected 6.6.51 through 6.6.Not affected 6.10.10 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before 878f32878351104448b86ef5b85d1f8ed6f599fbAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before ec28c35029b7930f31117f9284874b63bea4f31bAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 07f384c5be1f8633b13f0a22616e227570450bc6Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 3b692794b81f2ecad69a4adbba687f3836824adaAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 4e8771a3666c8f216eefd6bd2fd50121c6c437dbAffected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.181 through 5.15.*Not affected
6.1.135 through 6.1.*Not affected
6.6.51 through 6.6.*Not affected
6.10.10 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.