CVE-2024-35999

Katalog CVE

CVSS 7.5 · High EPSS 0,38%

Kerentanan Improper Locking pada linux kernel. Skor CVSS 3.1 7.5 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 ("Data race condition (MISSING_LOCK)")

Rincian

Terbit di NVD

20 Mei 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-667: Improper Locking

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e patch
• https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00 patch
• https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887 patch
• https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729 patch