CVE-2024-35867 is a high-severity use-after-free (UAF) vulnerability in the Linux kernel's SMB client implementation. It occurs in the cifs_stats_proc_show() function when sessions that are being torn down (status == SES_EXITING) are not properly skipped, leading to potential use-after-free conditions. This flaw has been resolved by adding logic to skip such sessions to prevent UAF.