CVE-2024-42307

cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path

Dan Carpenter reported a Smack static checker warning:

fs/smb/client/cifsfs.c:1981 init_cifs()

error: we previously assumed 'serverclose_wq' could be null (see line 1895)

The patch which introduced the serverclose workqueue used the wrong

oredering in error paths in init_cifs() for freeing it on errors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Published
2024-08-17T09:09Z
EPSS history
Timeline
  • 17 AUG 09:09Z
    cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path
    cvelistv5