CVE-2024-35865

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35865
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/21fed37d2bdcde33453faf61d3d4d96c355f04bd Patch
https://git.kernel.org/stable/c/22863485a4626ec6ecf297f4cc0aef709bc862e4 Patch
https://git.kernel.org/stable/c/3dba0e5276f131e36d6d8043191d856f49238628 Patch
https://git.kernel.org/stable/c/84488466b7a69570bdbf76dd9576847ab97d54e7 Patch
https://git.kernel.org/stable/c/21fed37d2bdcde33453faf61d3d4d96c355f04bd Patch
https://git.kernel.org/stable/c/22863485a4626ec6ecf297f4cc0aef709bc862e4 Patch
https://git.kernel.org/stable/c/3dba0e5276f131e36d6d8043191d856f49238628 Patch
https://git.kernel.org/stable/c/84488466b7a69570bdbf76dd9576847ab97d54e7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
History

07 Apr 2025, 18:57

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/21fed37d2bdcde33453faf61d3d4d96c355f04bd - () https://git.kernel.org/stable/c/21fed37d2bdcde33453faf61d3d4d96c355f04bd - Patch
References () https://git.kernel.org/stable/c/22863485a4626ec6ecf297f4cc0aef709bc862e4 - () https://git.kernel.org/stable/c/22863485a4626ec6ecf297f4cc0aef709bc862e4 - Patch
References () https://git.kernel.org/stable/c/3dba0e5276f131e36d6d8043191d856f49238628 - () https://git.kernel.org/stable/c/3dba0e5276f131e36d6d8043191d856f49238628 - Patch
References () https://git.kernel.org/stable/c/84488466b7a69570bdbf76dd9576847ab97d54e7 - () https://git.kernel.org/stable/c/84488466b7a69570bdbf76dd9576847ab97d54e7 - Patch
CWE CWE-416
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/21fed37d2bdcde33453faf61d3d4d96c355f04bd - () https://git.kernel.org/stable/c/21fed37d2bdcde33453faf61d3d4d96c355f04bd -
References () https://git.kernel.org/stable/c/22863485a4626ec6ecf297f4cc0aef709bc862e4 - () https://git.kernel.org/stable/c/22863485a4626ec6ecf297f4cc0aef709bc862e4 -
References () https://git.kernel.org/stable/c/3dba0e5276f131e36d6d8043191d856f49238628 - () https://git.kernel.org/stable/c/3dba0e5276f131e36d6d8043191d856f49238628 -
References () https://git.kernel.org/stable/c/84488466b7a69570bdbf76dd9576847ab97d54e7 - () https://git.kernel.org/stable/c/84488466b7a69570bdbf76dd9576847ab97d54e7 -

01 Nov 2024, 16:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: smb: cliente: corrige UAF potencial en smb2_is_valid_oplock_break() Omita las sesiones que se están eliminando (estado == SES_EXITING) para evitar UAF.

19 May 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-19 09:15

Updated : 2025-04-07 18:57

NVD link : CVE-2024-35865

Mitre link : CVE-2024-35865

CVE.ORG link : CVE-2024-35865

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free