CVE-2024-35861

CVE-2024-35861: Linux kernel CIFS client vulnerability fixed by skipping sessions that are tearing down (status SES_EXITING) to avoid a use-after-free in cifs_signal_cifsd_for_reconnect(). The root cause was a potential UAF when reconnecting CIFS sessions. The patch prevents dereferencing freed o...