CVE-2024-35864: linux-libc-dev - Potential Use-After-Free in smb2_is_valid_lease_break()
Summary
CVE-2024-35864: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling programs that use the Linux kernel's C library interface. It is an essential component for building and running applications on Linux systems. The package is widely used and is included in various Linux distributions, including Debian. This vulnerability affects the linux-libc-dev package version 6.1.90-1.
Vulnerability Detail
The vulnerability CVE-2024-35864 is a potential use-after-free (UAF) vulnerability in the smb2_is_valid_lease_break() function of the Linux kernel's SMB client. This vulnerability could be exploited by an attacker to cause a denial-of-service (DoS) condition or potentially execute arbitrary code. The vulnerability arises from a failure to properly handle sessions that are being torn down, leading to a UAF condition. An attacker could craft a malicious SMB request to trigger the vulnerability and potentially gain control over the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment. It is recommended to apply the official security patches as soon as they become available.
Conclusion
The linux-libc-dev package is vulnerable to a potential use-after-free vulnerability in the smb2_is_valid_lease_break() function of the Linux kernel's SMB client. This vulnerability could allow an attacker to cause a denial-of-service condition or potentially execute arbitrary code. It is crucial to update the linux-libc-dev package to a version that includes the fix for CVE-2024-35864 as soon as possible. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling programs that use the Linux kernel's C library interface.
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to various security issues, including crashes, memory corruption, and potential code execution.
An attacker can exploit this vulnerability by crafting a malicious SMB request to trigger the use-after-free condition in the smb2_is_valid_lease_break() function of the Linux kernel's SMB client.
This vulnerability could lead to a denial-of-service (DoS) condition or potentially allow an attacker to execute arbitrary code on the affected system.
Yes, a fix for this vulnerability has been released. Users should update the linux-libc-dev package to a version that includes the fix as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
