CVE-2024-58087

HighCVSS 8.1/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix racy issue from session lookup and expire

Increment the session reference count within the lock for lookup to avoid racy issue with session expire.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-667

Affected software

VendorProductVersions
LinuxLinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 2107ab40629aeabbec369cf34b8cf0f288c3eb1b; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 37a0e2b362b3150317fb6e2139de67b1e29ae5ff; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 450a844c045ff0895d41b05a1cbe8febd1acfcfd; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < a39e31e22a535d47b14656a7d6a893c7f6cf758c; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < b95629435b84b9ecc0c765995204a4d8a913ed52
LinuxLinux5.15

References

Timeline

Published
Mar 12, 2025
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-580885.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc2CVE-2024-580895.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfs_run_delalloc_range() faileCVE-2024-58096.1The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it back in the page, leadCVE-2024-580905.5In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David reCVE-2024-580915.5In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/O DMA areas are notCVE-2024-580925.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_lCVE-2024-580937.8In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-580945.5In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before truncation in jfs_truncate_nolock() AdCVE-2024-580955.5In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before txBeginAnon() call Added a read-only cCVE-2024-580965.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode athCVE-2024-580975.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring WhiCVE-2024-580985.5In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global functions When process
CVE-2024-58087: High severity, CVSS 8.1 | Vulnix