Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42307
HistoryAug 17, 2024 - 9:09 a.m.

CVE-2024-42307 cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path

2024-08-1709:09:12
Linux
github.com
1
linux kernel
cifs
null pointer
vulnerability
fix
error path

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path

Dan Carpenter reported a Smack static checker warning:
fs/smb/client/cifsfs.c:1981 init_cifs()
error: we previously assumed ‘serverclose_wq’ could be null (see line 1895)

The patch which introduced the serverclose workqueue used the wrong
oredering in error paths in init_cifs() for freeing it on errors.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial