CVE-2024-35869: linux-libc-dev - smb: client: guarantee refcounted children from parent session
Summary
CVE-2024-35869: In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-free bugs when walking DFS referrals, mounting and performing D... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling programs that use the Linux kernel's C library interface. It is an essential component for building and running applications on Linux systems. The vulnerability affects the linux-libc-dev package version 6.1.90-1.
Vulnerability Detail
The vulnerability (CVE-2024-35869) in the linux-libc-dev package has been resolved. It relates to the smb client and involves guaranteeing refcounted children from the parent session. This vulnerability could potentially lead to use-after-free bugs when walking DFS referrals, mounting, and performing DFS failover. The fix ensures that all children from the parent session are also refcounted, eliminating the possibility of such bugs. Additionally, the @tcon->dfs_ses_list has been removed.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The linux-libc-dev package version 6.1.90-1 is affected by a vulnerability (CVE-2024-35869) related to the smb client. It has been resolved by ensuring refcounted children from the parent session and removing the @tcon->dfs_ses_list. To fix this vulnerability, it is recommended to update the linux-libc-dev package to version 6.1.90-1 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package provides header files and libraries for compiling programs that use the Linux kernel's C library interface. It is essential for building and running applications on Linux systems.
A use-after-free bug is a type of software vulnerability that occurs when a program continues to use a memory address after it has been freed. This can lead to unexpected behavior and potential security issues.
DFS is a file system that allows multiple servers to be logically grouped together to form a single file system. It provides a unified namespace and allows for transparent access to files and directories across multiple servers.
A refcounted object is an object that keeps track of the number of references to it. When the reference count reaches zero, the object is freed. This mechanism helps prevent use-after-free bugs and ensures proper memory management.
This vulnerability could potentially lead to use-after-free bugs when working with DFS referrals, mounting, and performing DFS failover. Exploiting this vulnerability could result in unexpected behavior, crashes, or even remote code execution.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
