Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2024-35866

Description

In the Linux kernel, the following vulnerability has been resolved:smb: client: fix potential UAF in cifs_dump_full_key()Skip sessions that are being teared down (status == SES_EXITING) toavoid UAF.

POC

Reference

No PoCs from references.

Github

- https://github.com/bygregonline/devsec-fastapi-report

- https://github.com/runwhen-contrib/helm-charts

- https://github.com/w4zu/Debian_security