CVE-2024-35863

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in is_valid_oplock_break()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < 494c91e1e9413b407d12166a61b84200d4d54fac; >= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < 0a15ba88a32fa7a516aff7ffd27befed5334dff2; >= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < 16d58c6a7db5050b9638669084b63fc05f951825; >= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < 69ccf040acddf33a3a85ec0f6b45ef84b0f7ec29; a67172a013953664b1dad03c648200c70b90506c; >= 3.12.48, < 3.13
LinuxLinux3.13

References

Timeline

Published
May 19, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-358647.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sesCVE-2024-358659.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip seCVE-2024-358667.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions tCVE-2024-358677.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessionsCVE-2024-358687.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_write() Skip sessionCVE-2024-358699.8In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid pCVE-2024-35875.4The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid PortfCVE-2024-358709.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to CVE-2024-358717.1In the Linux kernel, the following vulnerability has been resolved: riscv: process: Fix kernel gp leakage childregs represents the registeCVE-2024-358725.5In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folio_is_secCVE-2024-358735.5In the Linux kernel, the following vulnerability has been resolved: riscv: Fix vector state restore in rt_sigreturn() The RISC-V Vector spCVE-2024-358745.5In the Linux kernel, the following vulnerability has been resolved: aio: Fix null ptr deref in aio_complete() wakeup list_del_init_careful
CVE-2024-35863: High severity, CVSS 7.8 | Vulnix