CVE-2024-35864

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in smb2_is_valid_lease_break()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < c868cabdf6fdd61bea54532271f4708254e57fc5; >= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < f92739fdd4522c4291277136399353d7c341fae4; >= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < a8344e2b69bde63f713b0aa796d70dbeadffddfb; >= 7f48558e6489d032b1584b0cc9ac4bb11072c034, < 705c76fbf726c7a2f6ff9143d4013b18daaaebf1; a67172a013953664b1dad03c648200c70b90506c; >= 3.12.48, < 3.13
LinuxLinux3.13

References

Timeline

Published
May 19, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-358659.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip seCVE-2024-358667.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions tCVE-2024-358677.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessionsCVE-2024-358687.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_write() Skip sessionCVE-2024-358699.8In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid pCVE-2024-35875.4The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid PortfCVE-2024-358709.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to CVE-2024-358717.1In the Linux kernel, the following vulnerability has been resolved: riscv: process: Fix kernel gp leakage childregs represents the registeCVE-2024-358725.5In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folio_is_secCVE-2024-358735.5In the Linux kernel, the following vulnerability has been resolved: riscv: Fix vector state restore in rt_sigreturn() The RISC-V Vector spCVE-2024-358745.5In the Linux kernel, the following vulnerability has been resolved: aio: Fix null ptr deref in aio_complete() wakeup list_del_init_carefulCVE-2024-358755.5In the Linux kernel, the following vulnerability has been resolved: x86/coco: Require seeding RNG with RDRAND on CoCo systems There are fe