VulnerabilityAnalyzed
CVE-2024-26928
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
HIGH 7.8EPSS 0.28%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.28% probability · 20th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- debian/debian linux · linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/229042314602db62559ecacba127067c22ee7b88Patch
- https://git.kernel.org/stable/c/3402faf78b2516b0af1259baff50cc8453ef0bd1Patch
- https://git.kernel.org/stable/c/8f8718afd446cd4ea3b62bacc3eec09f8aae85eePatch
- https://git.kernel.org/stable/c/a140224bcf87eb98a87b67ff4c6826c57e47b704Patch
- https://git.kernel.org/stable/c/a65f2b56334ba4dc30bd5ee9ce5b2691b973344dPatch
- https://git.kernel.org/stable/c/ca545b7f0823f19db0f1148d59bc5e1a56634502Patch
- https://git.kernel.org/stable/c/229042314602db62559ecacba127067c22ee7b88Patch
- https://git.kernel.org/stable/c/3402faf78b2516b0af1259baff50cc8453ef0bd1Patch
- https://git.kernel.org/stable/c/a65f2b56334ba4dc30bd5ee9ce5b2691b973344dPatch
- https://git.kernel.org/stable/c/ca545b7f0823f19db0f1148d59bc5e1a56634502Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.htmlMailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.