CVE-2024-35865: Vulnerability in linux-libc-dev - Potential Use-After-Free in smb2_is_valid_oplock_break()
Summary
CVE-2024-35865: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in Debian that provides the C library headers for the Linux kernel. It is used by developers to compile and build applications that interact with the kernel. The package contains essential header files and definitions required for system calls, data structures, and other kernel-related functionalities. This vulnerability affects the linux-libc-dev package, specifically in the smb2_is_valid_oplock_break() function of the SMB client implementation.
Vulnerability Detail
The vulnerability (CVE-2024-35865) in linux-libc-dev's SMB client implementation could lead to a Use-After-Free (UAF) condition. When tearing down sessions, the code fails to skip sessions that are already in the process of being terminated. This oversight can result in a UAF, where an attacker could potentially exploit the freed memory to execute arbitrary code or cause a denial of service. The vulnerability has a CVSS score of 5.5, indicating a medium severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the provided fix by updating the linux-libc-dev package to the patched version.
Conclusion
The linux-libc-dev package in Debian is vulnerable to a Use-After-Free issue in the SMB client implementation. To mitigate this vulnerability, users should update their linux-libc-dev package to version 6.1.90-1 or later. It is essential to promptly apply the provided fix to ensure the security and stability of systems relying on this package. For further support or assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in Debian that provides the C library headers for the Linux kernel. It is used by developers to compile and build applications that interact with the kernel.
The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by exploiting the Use-After-Free condition in the SMB client implementation of linux-libc-dev.
A Use-After-Free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to various security issues, including code execution or crashes.
The CVSS score of this vulnerability is 5.5, indicating a medium severity level.
Users can update the linux-libc-dev package by obtaining the latest version (6.1.90-1 or later) from the official Debian repositories or using their package manager of choice.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
