Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-35864
HistoryMay 19, 2024 - 9:15 a.m.

CVE-2024-35864

2024-05-1909:15:07
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
1
linux kernel
vulnerability
resolved
smb
uaf
smb2_is_valid_lease_break
sessions
teared down

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in smb2_is_valid_lease_break()

Skip sessions that are being teared down (status == SES_EXITING) to
avoid UAF.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%