CVE-2024-35869
Assigner: Linux
Published: 2024-05-19T08:34:27.645Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

smb: client: guarantee refcounted children from parent session

Avoid potential use-after-free bugs when walking DFS referrals,
mounting and performing DFS failover by ensuring that all children
from parent @tcon->ses are also refcounted.  They're all needed across
the entire DFS mount.  Get rid of @tcon->dfs_ses_list while we're at
it, too.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: 645f332c6b63
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: e1db9ae87b71
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 062a7f0ff46e
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 6.6.29
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.8.5
lessThanOrEqual: 6.8.*
status: unaffected
versionType: custom
version: 6.9
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: smb: client: guarantee refcounted children from parent session
x_generator: engine: bippy-d175d3acf727