Lucene search

K
osvGoogleOSV:CVE-2024-46742
HistorySep 18, 2024 - 8:15 a.m.

CVE-2024-46742

2024-09-1808:15:03
Google
osv.dev
linux kernel
smb2_open
null-ptr-deref

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

16.4%

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE)
and parse_lease_state() return NULL.

Fix this by check if ‘lease_ctx_info’ is NULL.

Additionally, remove the redundant parentheses in
parse_durable_handle_context().

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

16.4%

Related for OSV:CVE-2024-46742