CVE-2024-35999CWE-667

CVE-2024-35999

High · published May 20, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb3: missing lock when picking channel

Coverity spotted a place where we should have been holding the

channel lock when accessing the ses channel index.

Addresses-Coverity: 1582039 ("Data race condition (MISSING_LOCK)")

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.5th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-05-20T14:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 6.1.916.1.91
linux/linux_kernel≥ 6.2, < 6.6.306.6.30
linux/linux_kernel≥ 6.7, < 6.8.96.8.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 20 MAY 09:48Z
    smb3: missing lock when picking channel
    cvelistv5