CVE-2024-35865

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35861

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifssignalcifsdforreconnect Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35864

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidleasebreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35868 smb: client: fix potential UAF in cifs_stats_proc_write()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35868 smb: client: fix potential UAF in cifs_stats_proc_write()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35866 smb: client: fix potential UAF in cifs_dump_full_key()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsdumpfullkey Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35865

CVE-2024-35865 is a Linux kernel vulnerability affecting the SMB client path, specifically a use-after-free in smb2_is_valid_oplock_break(). The issue arises when skipping sessions that are tearing down (status SES_EXITING) is not performed correctly, enabling a UAF condition in the SMB2 oplock b...

CVE-2024-35861

CVE-2024-35861: In the Linux kernel, smb client code (cifs) was fixed to address a potential use-after-free in cifs_signal_cifsd_for_reconnect(). The patch adds a skip for sessions that are tearing down (status == SES_EXITING) to avoid a UAF. The description indicates this fixes a use-after-free ...

CVE-2024-26928

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsdebugfilesprocshow Skip sessions that are being teared down status == SESEXITING to avoid UAF...