PT-2024-3842

CVE-2024-35865

·

Published

2024-04-03

·

Updated

2026-10-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a potential use-after-free (UAF) in the smb2 is valid oplock break() function. This function is part of the SMB client implementation in the Linux kernel. The vulnerability can be exploited to cause a denial of service. To avoid the UAF, sessions that are being torn down (with a status of SES EXITING) are skipped.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
AZL-59566
CLSA-2025-1738592614
CLSA-2025-1738663576
CLSA-2025-1738663660
INFSA-2024_9315
RHSA-2024:9315
RHSA-2024_9315
SUSE-SU-2024:2008-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2135-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2360-1
SUSE-SU-2024:2381-1
SUSE-SU-2024:2561-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6893-1
USN-6893-2
USN-6893-3
USN-6918-1
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8597-1
USN-8610-1
USN-8620-1
USN-8620-2
USN-8620-3
USN-8620-4
USN-8668-1
USN-8668-2
Found an issue in the description? Have something to add? Feel free to write us 👾