CVE-2024-35867

Published: May 19, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected (8)

Products: Debian: Debian Linux · Linux: Linux Kernel

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0
Linux Linux Kernel	From 4.20 to 5.10.237
Linux Linux Kernel	From 5.11 to 5.15.181
Linux Linux Kernel	From 5.16 to 6.1.85
Linux Linux Kernel	From 6.2 to 6.6.26
Linux Linux Kernel	From 6.7 to 6.8.5
Linux Linux Kernel	Version 6.9 rc1
Linux Linux Kernel	Version 6.9 rc2

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (14)

https://git.kernel.org/stable/c/0865ffefea197b437ba78b5dd8d8e256253efd65

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/16b7d785775eb03929766819415055e367398f49

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/1e12f0d5c66f07c934041621351973a116fa13c7

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/838ec01ea8d3deb5d123e8ed9022e8162dc3f503

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/bb6570085826291dc392005f9fec16ea5da3c8ad

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/c3cf8b74c57924c0985e49a1fdf02d3395111f39

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

http://www.openwall.com/lists/oss-security/2024/05/29/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2024/05/30/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2024/05/30/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://git.kernel.org/stable/c/0865ffefea197b437ba78b5dd8d8e256253efd65

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/16b7d785775eb03929766819415055e367398f49

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/1e12f0d5c66f07c934041621351973a116fa13c7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/c3cf8b74c57924c0985e49a1fdf02d3395111f39

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.