Search: CVE-2024-53179

A critical use-after-free vulnerability (CVE-2024-53179) in the Linux kernel SMB client was fixed. The flaw occurs in handling the signing key during SMB2.1+ signed mounts due to a race condition involving session authentication key response pointers. This could lead to memory corruption. The issue was addressed by validating session status before accessing the signing key. Multiple Linux kernel versions prior to 6.8.0-1029.x and some 3.11 to 3.13 versions are affected. A patch is available in Linux kernel versions 6.8.0-1029.x and later.