CVE-2024-46736CWE-415

CVE-2024-46736

Critical · published September 18, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix double put of @cfile in smb2_rename_path()

If smb2_set_path_attr() is called with a valid @cfile and returned

-EINVAL, we need to call cifs_get_writable_path() again as the

reference of @cfile was already dropped by previous smb2_compound_op()

call.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00606 · 48.3th percentile
Weakness
CWE-415 · Double Free
Published
2024-09-18T12:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6.32, < 6.6.516.6.51
linux/linux_kernel≥ 6.9, < 6.10.106.10.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/1a46c7f6546b73cbf36f5a618a1a6bbb45391eb3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3523a3df03c6f04f7ea9c2e7050102657e331a4f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b27ea9c96efd2c252a981fb00d0f001b86c90f3e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 SEP 07:11Z
    smb: client: fix double put of @cfile in smb2_rename_path()
    cvelistv5