In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential UAF in cifsdumpfull_key()
Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
[
{
"id": "CVE-2024-35866-22f462b3",
"signature_version": "v1",
"digest": {
"length": 2080.0,
"function_hash": "317581174145098285360229732117912883740"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3103163ccd3be4adcfa37e15608fb497be044113",
"target": {
"file": "fs/smb/client/ioctl.c",
"function": "cifs_dump_full_key"
}
},
{
"id": "CVE-2024-35866-23b6e1d3",
"signature_version": "v1",
"digest": {
"length": 2083.0,
"function_hash": "238749724077120612243474977112954633458"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a60d360d9114b5085701a3702a0102b0d6d846",
"target": {
"file": "fs/smb/client/ioctl.c",
"function": "cifs_dump_full_key"
}
},
{
"id": "CVE-2024-35866-36b6a69d",
"signature_version": "v1",
"digest": {
"length": 2080.0,
"function_hash": "317581174145098285360229732117912883740"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58acd1f497162e7d282077f816faa519487be045",
"target": {
"file": "fs/smb/client/ioctl.c",
"function": "cifs_dump_full_key"
}
},
{
"id": "CVE-2024-35866-4ae5ae5f",
"signature_version": "v1",
"digest": {
"length": 2080.0,
"function_hash": "317581174145098285360229732117912883740"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@10e17ca4000ec34737bde002a13435c38ace2682",
"target": {
"file": "fs/smb/client/ioctl.c",
"function": "cifs_dump_full_key"
}
},
{
"id": "CVE-2024-35866-61e9aefd",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242282790011451838271793319105582551690",
"243422470134872394983237505653601646291",
"254987752231976429109011121562519970846",
"58009802390656700552889731446904337604",
"296569048515710434554411884090145291504",
"25654805600227064509810416544317694407",
"94298421848751160251866667559903179683",
"333869443719563706936085864319269980306",
"24320402572990428598429516514129409851"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a60d360d9114b5085701a3702a0102b0d6d846",
"target": {
"file": "fs/smb/client/ioctl.c"
}
},
{
"id": "CVE-2024-35866-85d898dd",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242282790011451838271793319105582551690",
"243422470134872394983237505653601646291",
"254987752231976429109011121562519970846",
"58009802390656700552889731446904337604"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d798fd98e3563027c5162259ead517057d6fa794",
"target": {
"file": "fs/cifs/ioctl.c"
}
},
{
"id": "CVE-2024-35866-b0813b8b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242282790011451838271793319105582551690",
"243422470134872394983237505653601646291",
"317068057429144997233831136308500406845",
"294517138718011094252263917256129339178",
"299442227417261836711754786817215194870",
"279406028004524454521902733077551539093",
"94298421848751160251866667559903179683",
"333869443719563706936085864319269980306",
"24320402572990428598429516514129409851"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@10e17ca4000ec34737bde002a13435c38ace2682",
"target": {
"file": "fs/smb/client/ioctl.c"
}
},
{
"id": "CVE-2024-35866-cae5879d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242282790011451838271793319105582551690",
"243422470134872394983237505653601646291",
"317068057429144997233831136308500406845",
"294517138718011094252263917256129339178",
"299442227417261836711754786817215194870",
"279406028004524454521902733077551539093",
"94298421848751160251866667559903179683",
"333869443719563706936085864319269980306",
"24320402572990428598429516514129409851"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58acd1f497162e7d282077f816faa519487be045",
"target": {
"file": "fs/smb/client/ioctl.c"
}
},
{
"id": "CVE-2024-35866-cc591430",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242282790011451838271793319105582551690",
"243422470134872394983237505653601646291",
"317068057429144997233831136308500406845",
"294517138718011094252263917256129339178",
"299442227417261836711754786817215194870",
"279406028004524454521902733077551539093",
"94298421848751160251866667559903179683",
"333869443719563706936085864319269980306",
"24320402572990428598429516514129409851"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3103163ccd3be4adcfa37e15608fb497be044113",
"target": {
"file": "fs/smb/client/ioctl.c"
}
},
{
"id": "CVE-2024-35866-e5bb0b58",
"signature_version": "v1",
"digest": {
"length": 2083.0,
"function_hash": "238749724077120612243474977112954633458"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d798fd98e3563027c5162259ead517057d6fa794",
"target": {
"file": "fs/cifs/ioctl.c",
"function": "cifs_dump_full_key"
}
}
]