What’s Vulnerable › Vulnerabilities

CVE-2024-35867: smb: client: fix potential UAF in cifs_stats_proc_show()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-19 · updated 2026-08-04
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected products

• Debian Linux: 11.0
• Linux kernel: from 4.20 before 5.10.237; from 5.11 before 5.15.181; from 5.16 before 6.1.85; from 6.2 before 6.6.26; from 6.7 before 6.8.5; 6.9-rc1, 6.9-rc2 — fixed in 5.10.237, 5.15.181, 6.1.85, 6.6.26, 6.8.5

How to fix

Upgrade to a fixed version: Linux kernel 5.10.237, 5.15.181, 6.1.85, 6.6.26. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0865ffefea197b437ba78b5dd8d8e256253efd65
• https://git.kernel.org/stable/c/16b7d785775eb03929766819415055e367398f49
• https://git.kernel.org/stable/c/1e12f0d5c66f07c934041621351973a116fa13c7
• https://git.kernel.org/stable/c/838ec01ea8d3deb5d123e8ed9022e8162dc3f503
• https://git.kernel.org/stable/c/bb6570085826291dc392005f9fec16ea5da3c8ad
• https://git.kernel.org/stable/c/c3cf8b74c57924c0985e49a1fdf02d3395111f39
• http://www.openwall.com/lists/oss-security/2024/05/29/2
• http://www.openwall.com/lists/oss-security/2024/05/30/1
• http://www.openwall.com/lists/oss-security/2024/05/30/2
• https://git.kernel.org/stable/c/0865ffefea197b437ba78b5dd8d8e256253efd65
• https://git.kernel.org/stable/c/16b7d785775eb03929766819415055e367398f49
• https://git.kernel.org/stable/c/1e12f0d5c66f07c934041621351973a116fa13c7

Get alerted when CVE-2024-35867 or the next vulnerability affects your stack