CVE-2024-26592 ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

2024-02-2216:21:44

Linux

github.com

linux kernel

vulnerability

ksmbd

uaf

tcp connection

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

The race is between the handling of a new TCP connection and
its disconnection. It leads to UAF on struct tcp_transport in
ksmbd_tcp_new_connection() function.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
    ],
    "vendor": "linux",
    "product": "linux_kernel",
    "versions": [
      {
        "status": "affected",
        "version": "5.15"
      },
      {
        "status": "affected",
        "version": "a848c4f15ab6",
        "lessThan": "999daf367b92",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a848c4f15ab6",
        "lessThan": "380965e48e9c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a848c4f15ab6",
        "lessThan": "24290ba94cd0",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a848c4f15ab6",
        "lessThan": "69d54650b751",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a848c4f15ab6",
        "lessThan": "38d20c62903d",
        "versionType": "git"
      }
    ],
    "defaultStatus": "affected"
  }
]