CVE-2024-26592
גבוהה 7.8
תיאור (מקור, אנגלית)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 100) נכון ל-14/10/2026
- CWE
- CWE-416
מוצרים מושפעים
linux: linux kernel
קישורים
- https://git.kernel.org/stable/c/24290ba94cd0136e417283b0dbf8fcdabcf62111 Patch
- https://git.kernel.org/stable/c/380965e48e9c32ee4263c023e1d830ea7e462ed1 Patch
- https://git.kernel.org/stable/c/38d20c62903d669693a1869aa68c4dd5674e2544 Patch
- https://git.kernel.org/stable/c/69d54650b751532d1e1613a4fb433e591aeef126 Patch
- https://git.kernel.org/stable/c/999daf367b924fdf14e9d83e034ee0f86bc17ec6 Patch
- https://git.kernel.org/stable/c/24290ba94cd0136e417283b0dbf8fcdabcf62111 Patch
- https://git.kernel.org/stable/c/380965e48e9c32ee4263c023e1d830ea7e462ed1 Patch
- https://git.kernel.org/stable/c/38d20c62903d669693a1869aa68c4dd5674e2544 Patch
- https://git.kernel.org/stable/c/69d54650b751532d1e1613a4fb433e591aeef126 Patch
- https://git.kernel.org/stable/c/999daf367b924fdf14e9d83e034ee0f86bc17ec6 Patch