CVE-2024-35863

CVE-2024-35863 : In the Linux kernel, a Use-After-Free (UAF) issue was fixed in the SMB client by guarding the is_valid_oplock_break path. The patch skips sessions that are tearing down (status == SES_EXITING) to avoid UAF, mitigating a local-vectored vulnerability in the SMB client code path. Th...

CVE-2024-35863 smb: client: fix potential UAF in is_valid_oplock_break()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35863 smb: client: fix potential UAF in is_valid_oplock_break()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35864 smb: client: fix potential UAF in smb2_is_valid_lease_break()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidleasebreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35863 smb: client: fix potential UAF in is_valid_oplock_break()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35864 smb: client: fix potential UAF in smb2_is_valid_lease_break()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidleasebreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35862 smb: client: fix potential UAF in smb2_is_network_name_deleted()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isnetworknamedeleted Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35862

CVE-2024-35862 (CVE entry) : Astra Linux security advisory describes a Linux kernel SMB client issue where a potential Use-After-Free (UAF) in smb2_is_network_name_deleted() could occur. The advisory notes that sessions being torn down (status SES_EXITING) are skipped to avoid UAF, indicating a f...

CVE-2024-35862 smb: client: fix potential UAF in smb2_is_network_name_deleted()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isnetworknamedeleted Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35861 smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifssignalcifsdforreconnect Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35861 smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifssignalcifsdforreconnect Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35861

CVE-2024-35861: In the Linux kernel, smb client code (cifs) was fixed to address a potential use-after-free in cifs_signal_cifsd_for_reconnect(). The patch adds a skip for sessions that are tearing down (status == SES_EXITING) to avoid a UAF. The description indicates this fixes a use-after-free ...

CVE-2024-35861 smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifssignalcifsdforreconnect Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35791

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Flush pages under kvm-lock to fix UAF in svmregisterencregion Do the cache flush of converted pages in svmregisterencregion before dropping kvm-lock to fix use-after-free issues where region and/or its array of pages...

CVE-2024-35791 KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Flush pages under kvm-lock to fix UAF in svmregisterencregion Do the cache flush of converted pages in svmregisterencregion before dropping kvm-lock to fix use-after-free issues where region and/or its array of pages...

CVE-2024-30295 When Animate parses FLA files, there is a UAF vulnerability caused by referencing uninitialized memory at Animate.exe+0x1149dcf

Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-30295 When Animate parses FLA files, there is a UAF vulnerability caused by referencing uninitialized memory at Animate.exe+0x1149dcf

Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-43651

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12354)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12354 advisory. 4.1.12-124.85.1 - Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition Zheng Wang Orabug: 35282809 CVE-2023-1989 Tenable has...

CVE-2022-48686

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the iowork loop when we set rdenabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted...