imPC@ndo IT

Tracker / CVE-2024-26592

CVE-2024-26592

Critical 9.8

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function.

Affected products and versions

linux linux_kernel · 5.15.0 → 5.15.149
linux linux_kernel · 5.16.0 → 6.1.75
linux linux_kernel · 6.2.0 → 6.6.14
linux linux_kernel · 6.7.0 → 6.7.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References