CVE-2024-35866

2024-05-2014:22:09

redhat.com

access.redhat.com

cve-2024-35866

linux kernel

smb client

uaf

fix

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

A use-after-free flaw was found in the Linux kernel in the smb client cifs_dump_full_key() when exiting a session. This flaw allows a local attacker to crash the system.

References

bugzilla.redhat.com/show_bug.cgi?id=2281760

lore.kernel.org/linux-cve-announce/2024051939-CVE-2024-35866-97e5@gregkh/T

nvd.nist.gov/vuln/detail/CVE-2024-35866

www.cve.org/CVERecord?id=CVE-2024-35866