Riskcovery

CVE-2024-56729

smb: Initialize cfid->tcon before performing network ops

State
Published
Severity
4.7 Medium
Published
Dec 29, 2024
Updated
Oct 30, 2026
Reserved
Dec 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: Initialize cfid->tcon before performing network ops

Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cached_dir_lease_break() and then fail to release the ref in cached_dir_offload_close, since cfid->tcon is still NULL.

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • ebe98f1447bbccf8228335c62d86af02a0ed23f7 to before 269ff24a5b2b58600151e04e964d2043bfe1843cAffected
  • ebe98f1447bbccf8228335c62d86af02a0ed23f7 to before 625e2357c8fcfae6e66dcc667dc656fe390bab15Affected
  • ebe98f1447bbccf8228335c62d86af02a0ed23f7 to before 4b216c8f9c7d84ef7de33ca60b97e08e03ef3292Affected
  • ebe98f1447bbccf8228335c62d86af02a0ed23f7 to before 1b9ab6b648f89441c8a13cb3fd8ca83ffebc5262Affected
  • ebe98f1447bbccf8228335c62d86af02a0ed23f7 to before c353ee4fb119a2582d0e011f66a76a38f5cf984dAffected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.