8.8

CVE-2025-40328

smb: client: fix potential UAF in smb2_close_cached_fid()

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in smb2_close_cached_fid()

find_or_create_cached_dir() could grab a new reference after kref_put()
had seen the refcount drop to zero but before cfid_list_lock is acquired
in smb2_close_cached_fid(), leading to use-after-free.

Switch to kref_put_lock() so cfid_release() is called with
cfid_list_lock held, closing that gap.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ebe98f1447bbccf8228335c62d86af02a0ed23f7
Version < cb52d9c86d70298de0ab7c7953653898cbc0efd6
Status affected
Version ebe98f1447bbccf8228335c62d86af02a0ed23f7
Version < 065bd62412271a2d734810dd50336cae88c54427
Status affected
Version ebe98f1447bbccf8228335c62d86af02a0ed23f7
Version < bdb596ceb4b7c3f28786a33840263728217fbcf5
Status affected
Version ebe98f1447bbccf8228335c62d86af02a0ed23f7
Version < 734e99623c5b65bf2c03e35978a0b980ebc3c2f8
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.1
Status affected
Version 0
Version < 6.1
Status unaffected
Version <= 6.6.*
Version 6.6.117
Status unaffected
Version <= 6.12.*
Version 6.12.58
Status unaffected
Version <= 6.17.*
Version 6.17.8
Status unaffected
Version <= *
Version 6.18
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.45% 0.37
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/cb52d9c86d70298de0ab7c7953653898cbc0efd6
https://git.kernel.org/stable/c/065bd62412271a2d734810dd50336cae88c54427
https://git.kernel.org/stable/c/bdb596ceb4b7c3f28786a33840263728217fbcf5
https://git.kernel.org/stable/c/734e99623c5b65bf2c03e35978a0b980ebc3c2f8