Race condition within a thread in Linux kernel smb client

1) Race condition within a thread

EUVDB-ID: #VU91426

Risk: Low

CVSSv3.1: 2.9 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-35999

CWE-ID: CWE-366 - Race Condition within a Thread

Exploit availability: No

Description

The vulnerability allows a local user to manipulate data.

The vulnerability exists due to a data race within the cifs_pick_channel() function in fs/smb/client/transport.c. A local user can manipulate data.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

External links

http://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729
http://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e
http://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00
http://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.