CVE-2024-39468

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-39468
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_smb_ses() to avoid such deadlock.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15 Patch
https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720 Patch
https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615a Patch
https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47 Patch
https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261 Patch
https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5 Patch
https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15 Patch
https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720 Patch
https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615a Patch
https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47 Patch
https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261 Patch
https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
History

21 Nov 2024, 09:27

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15 - Patch () https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15 - Patch
References () https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720 - Patch () https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720 - Patch
References () https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615a - Patch () https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615a - Patch
References () https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47 - Patch () https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47 - Patch
References () https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261 - Patch () https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261 - Patch
References () https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5 - Patch () https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5 - Patch

03 Sep 2024, 18:14

Type Values Removed Values Added
CWE CWE-667
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15 - () https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15 - Patch
References () https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720 - () https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720 - Patch
References () https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615a - () https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615a - Patch
References () https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47 - () https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47 - Patch
References () https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261 - () https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261 - Patch
References () https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5 - () https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5 - Patch

05 Jul 2024, 08:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720 -
  • () https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: smb: cliente: soluciona el punto muerto en smb2_find_smb_tcon() Desbloquea cifs_tcp_ses_lock antes de llamar a cifs_put_smb_ses() para evitar dicho punto muerto.

25 Jun 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-25 15:15

Updated : 2024-11-21 09:27

NVD link : CVE-2024-39468

Mitre link : CVE-2024-39468

CVE.ORG link : CVE-2024-39468

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking