QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-35866

Back to search

CVE-2024-35866

Published: May 19, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

VendorProductVersions

Linux

Linux

affected
1bb56810677f26b78d57a3038054943efd334a1c - < d798fd98e3563027c5162259ead517057d6fa794
affected
1bb56810677f26b78d57a3038054943efd334a1c - < f4a60d360d9114b5085701a3702a0102b0d6d846
affected
1bb56810677f26b78d57a3038054943efd334a1c - < 10e17ca4000ec34737bde002a13435c38ace2682
affected
1bb56810677f26b78d57a3038054943efd334a1c - < 3103163ccd3be4adcfa37e15608fb497be044113
affected
1bb56810677f26b78d57a3038054943efd334a1c - < 58acd1f497162e7d282077f816faa519487be045

Linux

Linux

affected
5.13
unaffected
0 - < 5.13
unaffected
5.15.181 - <= 5.15.*
unaffected
6.1.132 - <= 6.1.*
unaffected
6.6.26 - <= 6.6.*

+2 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now