First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-26928

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in cifs_debug_files_proc_show()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075, < 8f8718afd446cd4ea3b62bacc3eec09f8aae85ee; >= dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075, < a140224bcf87eb98a87b67ff4c6826c57e47b704; >= dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075, < 229042314602db62559ecacba127067c22ee7b88; >= dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075, < a65f2b56334ba4dc30bd5ee9ce5b2691b973344d; >= dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075, < 3402faf78b2516b0af1259baff50cc8453ef0bd1; >= dfe33f9abc08997e56f9bdf14fe9ac7ac0e14075, < ca545b7f0823f19db0f1148d59bc5e1a56634502
Linux	Linux	4.20

References

Timeline

Published: Apr 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-26938.8The Link Whisper Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.7.1 via deserializa CVE-2024-269307.8In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan CVE-2024-269315.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to com CVE-2024-269327.8In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() W CVE-2024-269337.8In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and CVE-2024-269347.8In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interface() Among the attri CVE-2024-269355.5In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc66 CVE-2024-269367.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() The res CVE-2024-269375.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with str CVE-2024-269385.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp CVE-2024-269397.0In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging CVE-2024-26948.8The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via deserialization of un

CVE-2024-26928: High severity, CVSS 7.8 | Vulnix