CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops
In the Linux kernel, the following vulnerability has been resolved:
smb: Initialize cfid->tcon before performing network ops
Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cacheddirleasebreak() and then fail to release the ref in cacheddiroffloadclose, since cfid->tcon is still NULL.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
smb: Initialize cfid->tcon before performing network ops
Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cacheddirleasebreak() and then fail to release the ref in cacheddiroffloadclose, since cfid->tcon is still NULL.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56729?
CVE-2024-56729 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-56729?
To fix CVE-2024-56729, update your Linux kernel to a version that addresses this vulnerability, specifically beyond the affected versions listed.
What versions of the Linux kernel are affected by CVE-2024-56729?
CVE-2024-56729 affects Linux kernel versions from 6.1 to 6.6.64, 6.7 to 6.11.11, and 6.12 to 6.12.2.
What type of vulnerability is CVE-2024-56729?
CVE-2024-56729 is a race condition vulnerability that potentially leads to resource leaks in the Linux kernel SMB implementation.
Is there a workaround for CVE-2024-56729?
Currently, the recommended approach for mitigating CVE-2024-56729 is to apply the necessary kernel updates, as no specific workaround has been provided.