Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

CVE-2024-35865: Linux kernel SMB client may crash during session shutdown

CVE-2024-35865 · published 2 years ago
Summary

The Linux operating system’s core code that handles SMB network shares can crash when a session is being closed. This affects Debian and several Ubuntu-based versions, including cloud editions. Install the latest system updates to apply the fix and prevent possible interruptions.

What to do
  • Update debian rootio-linux to version 5.10.247-1.root.io.42.
  • Update canonical linux-aws-5.15 to version 5.15.0-1112.119~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1117.126~20.04.1.
  • Update canonical linux-azure-fde-5.15 to version 5.15.0-1117.126~20.04.2.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1112.122~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-186.196~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1106.110~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1107.113~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-184.194~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1064.66~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1109.115~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1106.110~20.04.1.
  • Update canonical linux to version 5.15.0-186.196.
  • Update canonical linux-aws to version 5.15.0-1112.119.
  • Update canonical linux-aws-6.8 to version 6.8.0-1011.12~22.04.1.
  • Update canonical linux-azure to version 5.15.0-1117.126.
  • Update canonical linux-azure-6.8 to version 6.8.0-1010.10~22.04.1.
  • Update canonical linux-azure-fde to version 5.15.0-1117.126.
  • Update canonical linux-gcp to version 5.15.0-1112.122.
  • Update canonical linux-gke to version 5.15.0-1108.114.
  • Update canonical linux-gkeop to version 5.15.0-1095.103.
  • Update canonical linux-ibm to version 5.15.0-1106.110.
  • Update canonical linux-intel-iotg to version 5.15.0-1107.113.
  • Update canonical linux-kvm to version 5.15.0-1104.109.
  • Update canonical linux-lowlatency to version 5.15.0-184.194.
  • Update canonical linux-nvidia to version 5.15.0-1107.108.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1009.9~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1064.66.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1053.53.
  • Update canonical linux-oracle to version 5.15.0-1109.115.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1008.8~22.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1075.79.
  • Update canonical linux-bluefield to version 5.15.0-1096.98.
  • Update canonical linux-aws-fips to version 5.15.0-1112.119+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1117.126+fips1.
  • Update canonical linux-fips to version 5.15.0-186.196+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1112.122+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1104.106.
  • Update canonical linux-realtime to version 5.15.0-1111.120.
  • Update canonical linux to version 6.8.0-38.38.
  • Update canonical linux-aws to version 6.8.0-1011.12.
  • Update canonical linux-azure to version 6.8.0-1010.10.
  • Update canonical linux-gcp to version 6.8.0-1010.11.
  • Update canonical linux-gke to version 6.8.0-1006.9.
  • Update canonical linux-ibm to version 6.8.0-1008.8.
  • Update canonical linux-intel to version 6.8.0-1007.14.
  • Update canonical linux-lowlatency to version 6.8.0-38.38.1.
  • Update canonical linux-nvidia to version 6.8.0-1009.9.
  • Update canonical linux-oem-6.8 to version 6.8.0-1008.8.
  • Update canonical linux-oracle to version 6.8.0-1008.8.
  • Update canonical linux-raspi to version 6.8.0-1007.7.
  • Update canonical linux-riscv to version 6.8.0-38.38.1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2006.6.
  • Update canonical linux-realtime to version 6.8.1-1004.4.
  • Update debian rootio-linux to version 5.10.259-1.root.io.112.
  • Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
  • Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
  • Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
  • Update debian linux to version 6.1.85-1.
  • Update debian linux to version 6.8.9-1.
  • Update canonical linux-raspi to version 5.15.0-1106.109.
  • Update linux kernel to version 6.8.5.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update linux linux to version a710ef9e974f18232d2b9b19c90eda1a1167b2d4 or later.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:11 debian rootio-linux < 5.10.247-1.root.io.42
< 5.10.259-1.root.io.112
Fix: upgrade to 5.10.247-1.root.io.42
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1112.119~20.04.1
Fix: upgrade to 5.15.0-1112.119~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1117.126~20.04.1
Fix: upgrade to 5.15.0-1117.126~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 < 5.15.0-1117.126~20.04.2
Fix: upgrade to 5.15.0-1117.126~20.04.2
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1112.122~20.04.1
Fix: upgrade to 5.15.0-1112.122~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Showing 50 of 163. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-186.196~20.04.1
Fix: upgrade to 5.15.0-186.196~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1106.110~20.04.1
Fix: upgrade to 5.15.0-1106.110~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1107.113~20.04.1
Fix: upgrade to 5.15.0-1107.113~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-184.194~20.04.1
Fix: upgrade to 5.15.0-184.194~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1064.66~20.04.1
Fix: upgrade to 5.15.0-1064.66~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1109.115~20.04.1
Fix: upgrade to 5.15.0-1109.115~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1106.110~20.04.1
Fix: upgrade to 5.15.0-1106.110~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-186.196
Fix: upgrade to 5.15.0-186.196
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1112.119
Fix: upgrade to 5.15.0-1112.119
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1011.12~22.04.1
Fix: upgrade to 6.8.0-1011.12~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1117.126
Fix: upgrade to 5.15.0-1117.126
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1010.10~22.04.1
Fix: upgrade to 6.8.0-1010.10~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1117.126
Fix: upgrade to 5.15.0-1117.126
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1112.122
Fix: upgrade to 5.15.0-1112.122
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1108.114
Fix: upgrade to 5.15.0-1108.114
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1095.103
Fix: upgrade to 5.15.0-1095.103
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1106.110
Fix: upgrade to 5.15.0-1106.110
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1107.113
Fix: upgrade to 5.15.0-1107.113
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1104.109
Fix: upgrade to 5.15.0-1104.109
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-184.194
Fix: upgrade to 5.15.0-184.194
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1107.108
Fix: upgrade to 5.15.0-1107.108
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1009.9~22.04.1
Fix: upgrade to 6.8.0-1009.9~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1064.66
Fix: upgrade to 5.15.0-1064.66
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1053.53
Fix: upgrade to 5.15.0-1053.53
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1109.115
Fix: upgrade to 5.15.0-1109.115
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1008.8~22.04.1
Fix: upgrade to 6.8.0-1008.8~22.04.1
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1075.79
Fix: upgrade to 5.15.0-1075.79
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1096.98
Fix: upgrade to 5.15.0-1096.98
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1112.119+fips1
Fix: upgrade to 5.15.0-1112.119+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1117.126+fips1
Fix: upgrade to 5.15.0-1117.126+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-186.196+fips1
Fix: upgrade to 5.15.0-186.196+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1112.122+fips1
Fix: upgrade to 5.15.0-1112.122+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1104.106
Fix: upgrade to 5.15.0-1104.106
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1111.120
Fix: upgrade to 5.15.0-1111.120
Ubuntu:24.04:LTS canonical linux < 6.8.0-38.38
Fix: upgrade to 6.8.0-38.38
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1011.12
Fix: upgrade to 6.8.0-1011.12
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1010.10
Fix: upgrade to 6.8.0-1010.10
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1010.11
Fix: upgrade to 6.8.0-1010.11
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1006.9
Fix: upgrade to 6.8.0-1006.9
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-intel < 6.8.0-1007.14
Fix: upgrade to 6.8.0-1007.14
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-38.38.1
Fix: upgrade to 6.8.0-38.38.1
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1009.9
Fix: upgrade to 6.8.0-1009.9
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1007.7
Fix: upgrade to 6.8.0-1007.7
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-38.38.1
Fix: upgrade to 6.8.0-38.38.1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2006.6
Fix: upgrade to 6.8.0-2006.6
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1004.4
Fix: upgrade to 6.8.1-1004.4
– linux linux < a710ef9e974f18232d2b9b19c90eda1a1167b2d4
3.13
Root:Ubuntu:22.04 canonical rootio-linux < 5.15.0-185.195.root.io.101
< 5.15.0-186.196.root.io.103
< 5.15.0-186.196.aikido.104
Fix: upgrade to 5.15.0-185.195.root.io.101
Debian:12 debian linux < 6.1.85-1
Fix: upgrade to 6.1.85-1
Debian:13 debian linux < 6.8.9-1
Fix: upgrade to 6.8.9-1
– linux linux_kernel < 6.1.85
>= 6.2, < 6.6.26
>= 6.7, < 6.8.5
6.9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1106.109
Fix: upgrade to 5.15.0-1106.109
Linux linux kernel >= 6.7.0, < 6.8.5
Fix: upgrade to 6.8.5
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Original advisory text
CVE-2024-35865 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published19 May 2024
Updated13 Oct 2026
First seen13 Mar 2026
Track software like this
Free during beta