Lucene search

K
redhatcveRedhat.comRH:CVE-2024-35869
HistoryMay 20, 2024 - 1:44 p.m.

CVE-2024-35869

2024-05-2013:44:43
redhat.com
access.redhat.com
3
linux kernel
smb client
use-after-free
vulnerability
dfs mount
refcounted children

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-free bugs when walking DFS referrals, mounting and performing DFS failover by ensuring that all children from parent @tcon->ses are also refcounted. They’re all needed across the entire DFS mount. Get rid of @tcon->dfs_ses_list while we’re at it, too.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%