Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.4

CVE-2024-35862: Linux kernel can crash or be exploited via SMB client

CVE-2024-35862 · published 2 years ago
Summary

The Linux kernel used in standard and several cloud-oriented Linux distributions has a bug in the SMB network file sharing client that could let the system crash or be taken over by an attacker. The flaw occurs when the client handles connections that are being closed, leading to a use‑after‑free error. Apply the latest kernel updates from your Linux distribution as soon as they are available to fix the problem.

What to do
  • Update canonical linux-azure-5.15 to version 5.15.0-1114.123~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1108.117~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-178.188~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1104.110~20.04.1.
  • Update canonical linux-azure to version 5.15.0-1114.123.
  • Update canonical linux-lowlatency to version 5.15.0-178.188.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1049.49.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1074.78.
  • Update canonical linux-bluefield to version 5.15.0-1092.94.
  • Update canonical linux-azure-fips to version 5.15.0-1114.123+fips1.
  • Update canonical linux-aws-5.15 to version 5.15.0-1108.115~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-179.189~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1102.105~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1103.109~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1060.60~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1102.106~20.04.1.
  • Update canonical linux to version 5.15.0-179.189.
  • Update canonical linux-aws to version 5.15.0-1108.115.
  • Update canonical linux-aws-6.8 to version 6.8.0-1011.12~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1010.10~22.04.1.
  • Update canonical linux-gcp to version 5.15.0-1108.117.
  • Update canonical linux-gke to version 5.15.0-1104.110.
  • Update canonical linux-gkeop to version 5.15.0-1091.99.
  • Update canonical linux-ibm to version 5.15.0-1102.105.
  • Update canonical linux-intel-iotg to version 5.15.0-1103.109.
  • Update canonical linux-kvm to version 5.15.0-1100.105.
  • Update canonical linux-nvidia to version 5.15.0-1103.104.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1009.9~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1060.60.
  • Update canonical linux-oracle to version 5.15.0-1105.111.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1008.8~22.04.1.
  • Update canonical linux-raspi to version 5.15.0-1102.105.
  • Update canonical linux-aws-fips to version 5.15.0-1108.115+fips1.
  • Update canonical linux-fips to version 5.15.0-179.189+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1108.117+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1099.101.
  • Update canonical linux-realtime to version 5.15.0-1107.116.
  • Update canonical linux to version 6.8.0-38.38.
  • Update canonical linux-aws to version 6.8.0-1011.12.
  • Update canonical linux-azure to version 6.8.0-1010.10.
  • Update canonical linux-gcp to version 6.8.0-1010.11.
  • Update canonical linux-gke to version 6.8.0-1006.9.
  • Update canonical linux-ibm to version 6.8.0-1008.8.
  • Update canonical linux-intel to version 6.8.0-1007.14.
  • Update canonical linux-lowlatency to version 6.8.0-38.38.1.
  • Update canonical linux-nvidia to version 6.8.0-1009.9.
  • Update canonical linux-oem-6.8 to version 6.8.0-1008.8.
  • Update canonical linux-oracle to version 6.8.0-1008.8.
  • Update canonical linux-raspi to version 6.8.0-1007.7.
  • Update canonical linux-riscv to version 6.8.0-38.38.1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2006.6.
  • Update canonical linux-realtime to version 6.8.1-1004.4.
  • Update debian rootio-linux to version 5.10.247-1.root.io.42.
  • Update debian rootio-linux to version 5.10.251-1.root.io.61.
  • Update debian linux to version 6.1.85-1.
  • Update debian linux to version 6.8.9-1.
  • Update canonical linux-azure-fde to version 5.15.0-1114.123.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update linux kernel to version 6.8.5.
  • Update linux to version 5.15.0-202.212.aikido.118.
  • Update rootio-linux to version 5.15.0-202.212.aikido.118.
  • Update linux linux to version f9414004798d9742c1af23a1d839fe6a9503751c or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux < f9414004798d9742c1af23a1d839fe6a9503751c
5.12
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1114.123~20.04.1
Fix: upgrade to 5.15.0-1114.123~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1108.117~20.04.1
Fix: upgrade to 5.15.0-1108.117~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-178.188~20.04.1
Fix: upgrade to 5.15.0-178.188~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1104.110~20.04.1
Fix: upgrade to 5.15.0-1104.110~20.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1114.123
Fix: upgrade to 5.15.0-1114.123
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-178.188
Fix: upgrade to 5.15.0-178.188
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1049.49
Fix: upgrade to 5.15.0-1049.49
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1074.78
Fix: upgrade to 5.15.0-1074.78
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1092.94
Fix: upgrade to 5.15.0-1092.94
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1114.123+fips1
Fix: upgrade to 5.15.0-1114.123+fips1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1108.115~20.04.1
Fix: upgrade to 5.15.0-1108.115~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-179.189~20.04.1
Fix: upgrade to 5.15.0-179.189~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1102.105~20.04.1
Fix: upgrade to 5.15.0-1102.105~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1103.109~20.04.1
Fix: upgrade to 5.15.0-1103.109~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1060.60~20.04.1
Fix: upgrade to 5.15.0-1060.60~20.04.1
Showing 50 of 143. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1102.106~20.04.1
Fix: upgrade to 5.15.0-1102.106~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-179.189
Fix: upgrade to 5.15.0-179.189
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1108.115
Fix: upgrade to 5.15.0-1108.115
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1011.12~22.04.1
Fix: upgrade to 6.8.0-1011.12~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1010.10~22.04.1
Fix: upgrade to 6.8.0-1010.10~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1114.123
Fix: upgrade to 5.15.0-1114.123
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1108.117
Fix: upgrade to 5.15.0-1108.117
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1104.110
Fix: upgrade to 5.15.0-1104.110
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1091.99
Fix: upgrade to 5.15.0-1091.99
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1102.105
Fix: upgrade to 5.15.0-1102.105
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1103.109
Fix: upgrade to 5.15.0-1103.109
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1100.105
Fix: upgrade to 5.15.0-1100.105
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1103.104
Fix: upgrade to 5.15.0-1103.104
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1009.9~22.04.1
Fix: upgrade to 6.8.0-1009.9~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1060.60
Fix: upgrade to 5.15.0-1060.60
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1105.111
Fix: upgrade to 5.15.0-1105.111
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1008.8~22.04.1
Fix: upgrade to 6.8.0-1008.8~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1102.105
Fix: upgrade to 5.15.0-1102.105
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1108.115+fips1
Fix: upgrade to 5.15.0-1108.115+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-179.189+fips1
Fix: upgrade to 5.15.0-179.189+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1108.117+fips1
Fix: upgrade to 5.15.0-1108.117+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1099.101
Fix: upgrade to 5.15.0-1099.101
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1107.116
Fix: upgrade to 5.15.0-1107.116
Ubuntu:24.04:LTS canonical linux < 6.8.0-38.38
Fix: upgrade to 6.8.0-38.38
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1011.12
Fix: upgrade to 6.8.0-1011.12
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1010.10
Fix: upgrade to 6.8.0-1010.10
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1010.11
Fix: upgrade to 6.8.0-1010.11
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1006.9
Fix: upgrade to 6.8.0-1006.9
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-intel < 6.8.0-1007.14
Fix: upgrade to 6.8.0-1007.14
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-38.38.1
Fix: upgrade to 6.8.0-38.38.1
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1009.9
Fix: upgrade to 6.8.0-1009.9
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1007.7
Fix: upgrade to 6.8.0-1007.7
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-38.38.1
Fix: upgrade to 6.8.0-38.38.1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2006.6
Fix: upgrade to 6.8.0-2006.6
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1004.4
Fix: upgrade to 6.8.1-1004.4
Root:Debian:11 debian rootio-linux < 5.10.247-1.root.io.42
< 5.10.251-1.root.io.61
Fix: upgrade to 5.10.247-1.root.io.42
Debian:12 debian linux < 6.1.85-1
Fix: upgrade to 6.1.85-1
Debian:13 debian linux < 6.8.9-1
Fix: upgrade to 6.8.9-1
– linux linux_kernel >= 5.12, < 6.1.85
>= 6.2, < 6.6.26
>= 6.7, < 6.8.5
6.9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Linux linux kernel >= 6.7.0, < 6.8.5
Fix: upgrade to 6.8.5
Original advisory text
CVE-2024-35862 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_network_name_deleted() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
9.4 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published19 May 2024
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta