CVE-2024-35864

CriticalCVSS 9.8

Published: 19/05/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

In the Linux kernel, in the SMB client, there is a potential use-after-free vulnerability in smb2_is_valid_lease_break(). The issue involves sessions that are being torn down (status == SES_EXITING), which can lead to use-after-free. The fix skips such sessions to avoid UAF.

Risk Assessment

A use-after-free vulnerability can lead to system crashes or potential code execution. This affects SMB clients that may be exposed to attacks.

Recommendation

It is recommended to update the Linux kernel to a version with the fix that skips sessions being torn down in smb2_is_valid_lease_break().

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.