VDB

CISA-2024-35862

CISA-2024-35862 PUBLISHED

Reported by Linux · Published May 19, 2024

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_network_name_deleted() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected Products

VendorProductVersions
LinuxLinux9e550b085206544bd03a8b1dd58a5414e9508351, 9e550b085206544bd03a8b1dd58a5414e9508351, 9e550b085206544bd03a8b1dd58a5414e9508351
LinuxLinux5.12, 0, 6.1.85
linuxlinux_kernel5.12, 5.12, 5.12
LinuxLinux9e550b085206544bd03a8b1dd58a5414e9508351, 9e550b085206544bd03a8b1dd58a5414e9508351, 9e550b085206544bd03a8b1dd58a5414e9508351

Timeline

  • May 19, 2024 CVE Published
  • Jan 5, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›