In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix UAF issue in ksmbdtcpnew_connection()
The race is between the handling of a new TCP connection and
its disconnection. It leads to UAF on struct tcp_transport in
ksmbdtcpnew_connection() function.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38d20c62903d669693a1869aa68c4dd5674e2544",
"target": {
"function": "ksmbd_tcp_new_connection",
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-00947af1",
"deprecated": false,
"digest": {
"function_hash": "258982933506294044934685123813363229020",
"length": 686.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@380965e48e9c32ee4263c023e1d830ea7e462ed1",
"target": {
"function": "ksmbd_tcp_new_connection",
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-0bc84859",
"deprecated": false,
"digest": {
"function_hash": "258982933506294044934685123813363229020",
"length": 686.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38d20c62903d669693a1869aa68c4dd5674e2544",
"target": {
"file": "fs/smb/server/connection.h"
},
"id": "CVE-2024-26592-10922ba5",
"deprecated": false,
"digest": {
"line_hashes": [
"23500445995697614358058911333527332578",
"231685446571270433541406296538576629650",
"122223880327290390859825730683712283969",
"267083158198422985996152311789027241718"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38d20c62903d669693a1869aa68c4dd5674e2544",
"target": {
"function": "smb_direct_handle_connect_request",
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-10e8e148",
"deprecated": false,
"digest": {
"function_hash": "305779605317042651940984770621607454874",
"length": 740.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999daf367b924fdf14e9d83e034ee0f86bc17ec6",
"target": {
"file": "fs/ksmbd/transport_rdma.c"
},
"id": "CVE-2024-26592-11608d14",
"deprecated": false,
"digest": {
"line_hashes": [
"181768306070741814371902279487992152449",
"321251013688147905989992654855923523645",
"281399570391294314752958401365942528874",
"154156382311374223549059259499403375294",
"99350760516056855829474994505963386014",
"133602102300577652609557925070367749763",
"86165339585527816685712500942166884622",
"144166583331154122775607887324694352410",
"270210880746711961554899629588559122544",
"89485770539759518666913724511081035767",
"4941583107798794716523005384152061856",
"287144160508155681222902384548946244357"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69d54650b751532d1e1613a4fb433e591aeef126",
"target": {
"function": "smb_direct_handle_connect_request",
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-1ba69e0e",
"deprecated": false,
"digest": {
"function_hash": "305779605317042651940984770621607454874",
"length": 740.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999daf367b924fdf14e9d83e034ee0f86bc17ec6",
"target": {
"function": "stop_sessions",
"file": "fs/ksmbd/connection.c"
},
"id": "CVE-2024-26592-1c74ecfe",
"deprecated": false,
"digest": {
"function_hash": "297710158507843571379342647079802045317",
"length": 577.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69d54650b751532d1e1613a4fb433e591aeef126",
"target": {
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-2446ebfe",
"deprecated": false,
"digest": {
"line_hashes": [
"105923646912961119362675238899696792221",
"12106350933839018377575153373707786740",
"240309936284554467817841579343945712715",
"325503210277673383729570349512049712860",
"190877277374888146229229321921504068393",
"324928363459594150570277814261095080955",
"16683575651222005553415379323405965560",
"79456054584167247586457983959697042228",
"233816335664584348043263813336594911404",
"133938762892619658816484299148525866842",
"46856405769855779861213264216925185879",
"296760495681197548506892178693203484545",
"96820107405489514165729751488614667923",
"41998266716615838084508147699804015864"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38d20c62903d669693a1869aa68c4dd5674e2544",
"target": {
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-3211071e",
"deprecated": false,
"digest": {
"line_hashes": [
"181768306070741814371902279487992152449",
"321251013688147905989992654855923523645",
"281399570391294314752958401365942528874",
"154156382311374223549059259499403375294",
"99350760516056855829474994505963386014",
"133602102300577652609557925070367749763",
"86165339585527816685712500942166884622",
"144166583331154122775607887324694352410",
"270210880746711961554899629588559122544",
"89485770539759518666913724511081035767",
"4941583107798794716523005384152061856",
"287144160508155681222902384548946244357"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24290ba94cd0136e417283b0dbf8fcdabcf62111",
"target": {
"file": "fs/smb/server/connection.h"
},
"id": "CVE-2024-26592-34c4c95d",
"deprecated": false,
"digest": {
"line_hashes": [
"23500445995697614358058911333527332578",
"231685446571270433541406296538576629650",
"122223880327290390859825730683712283969",
"267083158198422985996152311789027241718"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69d54650b751532d1e1613a4fb433e591aeef126",
"target": {
"file": "fs/smb/server/connection.h"
},
"id": "CVE-2024-26592-376811e4",
"deprecated": false,
"digest": {
"line_hashes": [
"23500445995697614358058911333527332578",
"231685446571270433541406296538576629650",
"122223880327290390859825730683712283969",
"267083158198422985996152311789027241718"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@380965e48e9c32ee4263c023e1d830ea7e462ed1",
"target": {
"function": "smb_direct_handle_connect_request",
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-3bb7da07",
"deprecated": false,
"digest": {
"function_hash": "305779605317042651940984770621607454874",
"length": 740.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@380965e48e9c32ee4263c023e1d830ea7e462ed1",
"target": {
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-3f81201d",
"deprecated": false,
"digest": {
"line_hashes": [
"181768306070741814371902279487992152449",
"321251013688147905989992654855923523645",
"281399570391294314752958401365942528874",
"154156382311374223549059259499403375294",
"99350760516056855829474994505963386014",
"133602102300577652609557925070367749763",
"86165339585527816685712500942166884622",
"144166583331154122775607887324694352410",
"270210880746711961554899629588559122544",
"89485770539759518666913724511081035767",
"4941583107798794716523005384152061856",
"287144160508155681222902384548946244357"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24290ba94cd0136e417283b0dbf8fcdabcf62111",
"target": {
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-46da0c84",
"deprecated": false,
"digest": {
"line_hashes": [
"181768306070741814371902279487992152449",
"321251013688147905989992654855923523645",
"281399570391294314752958401365942528874",
"154156382311374223549059259499403375294",
"99350760516056855829474994505963386014",
"133602102300577652609557925070367749763",
"86165339585527816685712500942166884622",
"144166583331154122775607887324694352410",
"270210880746711961554899629588559122544",
"89485770539759518666913724511081035767",
"4941583107798794716523005384152061856",
"287144160508155681222902384548946244357"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999daf367b924fdf14e9d83e034ee0f86bc17ec6",
"target": {
"function": "smb_direct_handle_connect_request",
"file": "fs/ksmbd/transport_rdma.c"
},
"id": "CVE-2024-26592-66c94876",
"deprecated": false,
"digest": {
"function_hash": "305779605317042651940984770621607454874",
"length": 740.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38d20c62903d669693a1869aa68c4dd5674e2544",
"target": {
"function": "stop_sessions",
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-67a256ef",
"deprecated": false,
"digest": {
"function_hash": "297710158507843571379342647079802045317",
"length": 577.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38d20c62903d669693a1869aa68c4dd5674e2544",
"target": {
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-6859606d",
"deprecated": false,
"digest": {
"line_hashes": [
"22887569779032591785112031120052826163",
"27193792019115676164604069730181319853",
"303566636954606894566943388583390987309",
"200083574603869138969605407355694382609",
"288435908930870578981415236713994641802",
"227999906329101649809828657242814438669",
"336125250984958058216853110904073178858",
"177385029856945306925584920244752498860",
"191848658935356542597930879963425368881"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69d54650b751532d1e1613a4fb433e591aeef126",
"target": {
"function": "ksmbd_tcp_new_connection",
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-7336333c",
"deprecated": false,
"digest": {
"function_hash": "258982933506294044934685123813363229020",
"length": 686.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999daf367b924fdf14e9d83e034ee0f86bc17ec6",
"target": {
"file": "fs/ksmbd/transport_tcp.c"
},
"id": "CVE-2024-26592-75bb3176",
"deprecated": false,
"digest": {
"line_hashes": [
"105923646912961119362675238899696792221",
"12106350933839018377575153373707786740",
"240309936284554467817841579343945712715",
"325503210277673383729570349512049712860",
"190877277374888146229229321921504068393",
"324928363459594150570277814261095080955",
"16683575651222005553415379323405965560",
"79456054584167247586457983959697042228",
"233816335664584348043263813336594911404",
"133938762892619658816484299148525866842",
"46856405769855779861213264216925185879",
"296760495681197548506892178693203484545",
"96820107405489514165729751488614667923",
"41998266716615838084508147699804015864"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@380965e48e9c32ee4263c023e1d830ea7e462ed1",
"target": {
"file": "fs/smb/server/connection.h"
},
"id": "CVE-2024-26592-774c9a02",
"deprecated": false,
"digest": {
"line_hashes": [
"23500445995697614358058911333527332578",
"231685446571270433541406296538576629650",
"122223880327290390859825730683712283969",
"267083158198422985996152311789027241718"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24290ba94cd0136e417283b0dbf8fcdabcf62111",
"target": {
"function": "stop_sessions",
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-7ae22fb1",
"deprecated": false,
"digest": {
"function_hash": "297710158507843571379342647079802045317",
"length": 577.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999daf367b924fdf14e9d83e034ee0f86bc17ec6",
"target": {
"function": "ksmbd_tcp_new_connection",
"file": "fs/ksmbd/transport_tcp.c"
},
"id": "CVE-2024-26592-8d55e1c8",
"deprecated": false,
"digest": {
"function_hash": "258982933506294044934685123813363229020",
"length": 686.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24290ba94cd0136e417283b0dbf8fcdabcf62111",
"target": {
"function": "smb_direct_handle_connect_request",
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-951d6cb1",
"deprecated": false,
"digest": {
"function_hash": "305779605317042651940984770621607454874",
"length": 740.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69d54650b751532d1e1613a4fb433e591aeef126",
"target": {
"file": "fs/smb/server/transport_rdma.c"
},
"id": "CVE-2024-26592-96d2de06",
"deprecated": false,
"digest": {
"line_hashes": [
"181768306070741814371902279487992152449",
"321251013688147905989992654855923523645",
"281399570391294314752958401365942528874",
"154156382311374223549059259499403375294",
"99350760516056855829474994505963386014",
"133602102300577652609557925070367749763",
"86165339585527816685712500942166884622",
"144166583331154122775607887324694352410",
"270210880746711961554899629588559122544",
"89485770539759518666913724511081035767",
"4941583107798794716523005384152061856",
"287144160508155681222902384548946244357"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38d20c62903d669693a1869aa68c4dd5674e2544",
"target": {
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-a9160cae",
"deprecated": false,
"digest": {
"line_hashes": [
"105923646912961119362675238899696792221",
"12106350933839018377575153373707786740",
"240309936284554467817841579343945712715",
"325503210277673383729570349512049712860",
"190877277374888146229229321921504068393",
"324928363459594150570277814261095080955",
"16683575651222005553415379323405965560",
"79456054584167247586457983959697042228",
"233816335664584348043263813336594911404",
"133938762892619658816484299148525866842",
"46856405769855779861213264216925185879",
"296760495681197548506892178693203484545",
"96820107405489514165729751488614667923",
"41998266716615838084508147699804015864"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@380965e48e9c32ee4263c023e1d830ea7e462ed1",
"target": {
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-ad8002e5",
"deprecated": false,
"digest": {
"line_hashes": [
"22887569779032591785112031120052826163",
"27193792019115676164604069730181319853",
"303566636954606894566943388583390987309",
"200083574603869138969605407355694382609",
"288435908930870578981415236713994641802",
"227999906329101649809828657242814438669",
"336125250984958058216853110904073178858",
"177385029856945306925584920244752498860",
"191848658935356542597930879963425368881"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24290ba94cd0136e417283b0dbf8fcdabcf62111",
"target": {
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-b5f7817d",
"deprecated": false,
"digest": {
"line_hashes": [
"105923646912961119362675238899696792221",
"12106350933839018377575153373707786740",
"240309936284554467817841579343945712715",
"325503210277673383729570349512049712860",
"190877277374888146229229321921504068393",
"324928363459594150570277814261095080955",
"16683575651222005553415379323405965560",
"79456054584167247586457983959697042228",
"233816335664584348043263813336594911404",
"133938762892619658816484299148525866842",
"46856405769855779861213264216925185879",
"296760495681197548506892178693203484545",
"96820107405489514165729751488614667923",
"41998266716615838084508147699804015864"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@380965e48e9c32ee4263c023e1d830ea7e462ed1",
"target": {
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-bbd38021",
"deprecated": false,
"digest": {
"line_hashes": [
"105923646912961119362675238899696792221",
"12106350933839018377575153373707786740",
"240309936284554467817841579343945712715",
"325503210277673383729570349512049712860",
"190877277374888146229229321921504068393",
"324928363459594150570277814261095080955",
"16683575651222005553415379323405965560",
"79456054584167247586457983959697042228",
"233816335664584348043263813336594911404",
"133938762892619658816484299148525866842",
"46856405769855779861213264216925185879",
"296760495681197548506892178693203484545",
"96820107405489514165729751488614667923",
"41998266716615838084508147699804015864"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@380965e48e9c32ee4263c023e1d830ea7e462ed1",
"target": {
"function": "stop_sessions",
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-bc53c767",
"deprecated": false,
"digest": {
"function_hash": "297710158507843571379342647079802045317",
"length": 577.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999daf367b924fdf14e9d83e034ee0f86bc17ec6",
"target": {
"file": "fs/ksmbd/connection.c"
},
"id": "CVE-2024-26592-c5aa5260",
"deprecated": false,
"digest": {
"line_hashes": [
"22887569779032591785112031120052826163",
"27193792019115676164604069730181319853",
"303566636954606894566943388583390987309",
"200083574603869138969605407355694382609",
"288435908930870578981415236713994641802",
"227999906329101649809828657242814438669",
"336125250984958058216853110904073178858",
"177385029856945306925584920244752498860",
"191848658935356542597930879963425368881"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69d54650b751532d1e1613a4fb433e591aeef126",
"target": {
"function": "stop_sessions",
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-c793ceb8",
"deprecated": false,
"digest": {
"function_hash": "297710158507843571379342647079802045317",
"length": 577.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24290ba94cd0136e417283b0dbf8fcdabcf62111",
"target": {
"function": "ksmbd_tcp_new_connection",
"file": "fs/smb/server/transport_tcp.c"
},
"id": "CVE-2024-26592-d3f8aa68",
"deprecated": false,
"digest": {
"function_hash": "258982933506294044934685123813363229020",
"length": 686.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69d54650b751532d1e1613a4fb433e591aeef126",
"target": {
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-eb0eda0f",
"deprecated": false,
"digest": {
"line_hashes": [
"22887569779032591785112031120052826163",
"27193792019115676164604069730181319853",
"303566636954606894566943388583390987309",
"200083574603869138969605407355694382609",
"288435908930870578981415236713994641802",
"227999906329101649809828657242814438669",
"336125250984958058216853110904073178858",
"177385029856945306925584920244752498860",
"191848658935356542597930879963425368881"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999daf367b924fdf14e9d83e034ee0f86bc17ec6",
"target": {
"file": "fs/ksmbd/connection.h"
},
"id": "CVE-2024-26592-f3267b02",
"deprecated": false,
"digest": {
"line_hashes": [
"23500445995697614358058911333527332578",
"231685446571270433541406296538576629650",
"122223880327290390859825730683712283969",
"267083158198422985996152311789027241718"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24290ba94cd0136e417283b0dbf8fcdabcf62111",
"target": {
"file": "fs/smb/server/connection.c"
},
"id": "CVE-2024-26592-f52e4a0a",
"deprecated": false,
"digest": {
"line_hashes": [
"22887569779032591785112031120052826163",
"27193792019115676164604069730181319853",
"303566636954606894566943388583390987309",
"200083574603869138969605407355694382609",
"288435908930870578981415236713994641802",
"227999906329101649809828657242814438669",
"336125250984958058216853110904073178858",
"177385029856945306925584920244752498860",
"191848658935356542597930879963425368881"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
}
]