CVE-2024-58087CWE-667

CVE-2024-58087

Critical · published March 12, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
42.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix racy issue from session lookup and expire

Increment the session reference count within the lock for lookup to avoid

racy issue with session expire.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00512 · 42.8th percentile
Weakness
CWE-667 · Improper Locking
Published
2025-03-12T12:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15.145, < 5.15.1765.15.176
linux/linux_kernel≥ 6.1.29, < 6.1.1216.1.121
linux/linux_kernel≥ 6.2.16, < 6.36.3
linux/linux_kernel≥ 6.3.2, < 6.46.4
linux/linux_kernel≥ 6.7, < 6.12.66.12.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/2107ab40629aeabbec369cf34b8cf0f288c3eb1b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/37a0e2b362b3150317fb6e2139de67b1e29ae5ff · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/450a844c045ff0895d41b05a1cbe8febd1acfcfd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a39e31e22a535d47b14656a7d6a893c7f6cf758c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b95629435b84b9ecc0c765995204a4d8a913ed52 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://www.zerodayinitiative.com/advisories/ZDI-25-100/ · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 12 MAR 07:28Z
    ksmbd: fix racy issue from session lookup and expire
    cvelistv5