CVE-2024-35866 is a use-after-free (UAF) vulnerability in the Linux kernel's SMB client component, specifically in the cifs_dump_full_key() function. The flaw occurs when sessions that are in the process of being torn down (status == SES_EXITING) are not properly skipped, leading to potential memory corruption. This vulnerability has been fixed by ensuring such sessions are skipped to avoid the UAF condition.