9.8

CVE-2026-89636

smb: client: clear ce->tgthint in free_tgts()

In the Linux kernel, the following vulnerability has been resolved:

smb: client: clear ce->tgthint in free_tgts()

When free_tgts() frees all structures in ce->tlist, ce->tgthint
is left pointing to one of the freed cache_dfs_tgt structures.

If ce->tgthint is not reset before it is used later, it results
in a use-after-free.

Set ce->tgthint to NULL in free_tgts() after the elements are
freed to reflect that no elements remain.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 54be1f6c1c37498bba557049df646cc239fa37e3
Version < 14f60e959b5ac813715ff72e127beb3584ddabf6
Status affected
Version 54be1f6c1c37498bba557049df646cc239fa37e3
Version < 3ff9462bb7a06d8d32a1dc02d39580b078ec9e55
Status affected
Version 54be1f6c1c37498bba557049df646cc239fa37e3
Version < 7507bd1885643d0461a6017767492450af1ce2a3
Status affected
Version 54be1f6c1c37498bba557049df646cc239fa37e3
Version < 9ab46a13798a61d9d020b01d4e57efdabe6624fa
Status affected
Version 54be1f6c1c37498bba557049df646cc239fa37e3
Version < 5baab40404a9393bcc0b7b8f1950bf2c307e0984
Status affected
Version 54be1f6c1c37498bba557049df646cc239fa37e3
Version < b1b741cf8e7ce1b91d937e23decd3d3358748700
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.0
Status affected
Version 0
Version < 5.0
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.61% 0.472
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/7507bd1885643d0461a6017767492450af1ce2a3
https://git.kernel.org/stable/c/9ab46a13798a61d9d020b01d4e57efdabe6624fa
https://git.kernel.org/stable/c/5baab40404a9393bcc0b7b8f1950bf2c307e0984
https://git.kernel.org/stable/c/b1b741cf8e7ce1b91d937e23decd3d3358748700
https://git.kernel.org/stable/c/14f60e959b5ac813715ff72e127beb3584ddabf6
https://git.kernel.org/stable/c/3ff9462bb7a06d8d32a1dc02d39580b078ec9e55