CVE-2024-35867

smb: client: fix potential UAF in cifs_stats_proc_show()

HIGH

7.8

CVSS Score

Published: May 19, 2024 at 08:34 AM UTC

Updated: August 5, 2026 at 12:04 PM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

v ≥ 3.12.483.12.48 ≤ v < 3.133.13 ≤ v < 5.10.2373.13 ≤ v < 5.15.1813.13 ≤ v < 6.1.853.13 ≤ v < 6.6.263.13 ≤ v < 6.8.53.13 ≤ v < 6.94.20 ≤ v < 5.10.2375.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.856.2 ≤ v < 6.6.266.7 ≤ v < 6.8.53.12.48 6.9 rc1 6.9 rc27f48558e6489d032b1584b0cc9ac4bb11072c034a67172a013953664b1dad03c648200c70b90506c

Vendor states this is fixed in 0865ffefea197b437ba78b5dd8d8e256253efd65 (fixed)

Vendor states this is fixed in 16b7d785775eb03929766819415055e367398f49 (fixed)

Vendor states this is fixed in 1e12f0d5c66f07c934041621351973a116fa13c7 (fixed)

Vendor states this is fixed in 838ec01ea8d3deb5d123e8ed9022e8162dc3f503 (fixed)

Vendor states this is fixed in bb6570085826291dc392005f9fec16ea5da3c8ad (fixed)

Vendor states this is fixed in c3cf8b74c57924c0985e49a1fdf02d3395111f39 (fixed)

Vendor states this is fixed in 3.13 (unaffected)

Vendor states this is fixed in 5.10.237 (unaffected)

Vendor states this is fixed in 5.15.181 (unaffected)

Vendor states this is fixed in 6.1.85 (unaffected)

Vendor states this is fixed in 6.6.26 (unaffected)

Vendor states this is fixed in 6.8.5 (unaffected)