CVE-2024-35999

תיאור (מקור, אנגלית)

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 ("Data race condition (MISSING_LOCK)")

מדדים

CVSS 3.1

7.5 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-667

מוצרים מושפעים

linux: linux kernel

קישורים

• https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e Patch
• https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00 Patch
• https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887 Patch
• https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729 Patch
• https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e Patch
• https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00 Patch
• https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887 Patch
• https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729 Patch