CVE-2024-35863

2024-05-2014:21:57

redhat.com

access.redhat.com

linux kernel

cve-2024-35863

vulnerability

smb client

exploit

resolved

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

A use-after-free flaw was found in the Linux kernel in smb is_valid_oplock_break() when exiting a session. This flaw allows a local attacker to crash the system.

References

bugzilla.redhat.com/show_bug.cgi?id=2281773

lore.kernel.org/linux-cve-announce/2024051938-CVE-2024-35863-7c05@gregkh/T

nvd.nist.gov/vuln/detail/CVE-2024-35863

www.cve.org/CVERecord?id=CVE-2024-35863