CVE-2024-53186: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB request handling in ksmbdconnhandlerloop and the freeing of ksmbdconn in the workqueue handler handleksmbdwork. This leads to a UAF. - KASAN:...

The vulnerability of the `ksmbd_conn_handler_loop()` function in the `fs/smb/server/connection.c` file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdconnhandlerloop function in the fs/smb/server/connection.c file of the KSMBD file system of the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...

Linux kernel connection.c file out-of-bounds read vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An out-of-bounds read vulnerability exists in versions of Linux kernel prior to 6.3.8, which stems from the fact that fs/smb/server/connection.c does not validate the...