CVE-2024-35865

Source
https://cve.org/CVERecord?id=CVE-2024-35865
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35865.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-35865
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
RHSA (1)
ROOT (2)
SUSE (11)
UBUNTU (1)
Related
Published
2024-05-19T08:34:23Z
Modified
2026-10-20T10:30:24Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
smb: client: fix potential UAF in smb2_is_valid_oplock_break()
Details

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35865.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7f48558e6489d032b1584b0cc9ac4bb11072c034
Fixed
a710ef9e974f18232d2b9b19c90eda1a1167b2d4
Fixed
84488466b7a69570bdbf76dd9576847ab97d54e7
Fixed
21fed37d2bdcde33453faf61d3d4d96c355f04bd
Fixed
3dba0e5276f131e36d6d8043191d856f49238628
Fixed
22863485a4626ec6ecf297f4cc0aef709bc862e4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3.12.48
Fixed
3.13
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a67172a013953664b1dad03c648200c70b90506c

Affected versions

v3.*
v3.12.48
v3.12.49
v3.12.50
v3.12.51
v3.12.52
v3.12.53
v3.12.54
v3.12.55
v3.12.56
v3.12.57
v3.12.58
v3.12.59
v3.12.60
v3.12.61
v3.12.62
v3.12.63
v3.12.64
v3.12.65
v3.12.66
v3.12.67
v3.12.68
v3.12.69
v3.12.70
v3.12.71
v3.12.72
v3.12.73
v3.12.74

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35865.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.13.0
Fixed
5.15.209
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.85
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.26
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35865.json"