CVE-2024-46742

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

published September 18, 2024

CVSS
—
EPSS
0%
Percentile
17.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE)

and parse_lease_state() return NULL.

Fix this by check if 'lease_ctx_info' is NULL.

Additionally, remove the redundant parentheses in

parse_durable_handle_context().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.2th percentile
Published
2024-09-18T07:12Z
EPSS history
Timeline
  • 18 SEP 07:12Z
    smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
    cvelistv5