Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-58087

ksmbd: fix racy issue from session lookup and expire

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 2107ab40629aeabbec369cf34b8cf0f288c3eb1baffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 37a0e2b362b3150317fb6e2139de67b1e29ae5ffaffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 450a844c045ff0895d41b05a1cbe8febd1acfcfdaffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < a39e31e22a535d47b14656a7d6a893c7f6cf758caffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < b95629435b84b9ecc0c765995204a4d8a913ed52affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.176 to ≤ 5.15.*unaffected
  • 6.1.121 to ≤ 6.1.*unaffected
  • 6.6.67 to ≤ 6.6.*unaffected
  • 6.12.6 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References