CVE-2024-35861

A flaw was found in the Linux kernel's SMB (Server Message Block) client subsystem. During reconnect operations, the driver fails to properly skip sessions that are terminating, resulting in a use-after-free condition where deallocated memory is referenced. A local user could exploit this vulnerability to cause memory corruption, leading to a system crash and Denial of Service (DoS).

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires an existing CIFS/SMB share connection undergoing a reconnect sequence while a session is actively terminating. Typical enterprise deployments do not expose SMB client mounts to untrusted local users, and the condition cannot be triggered directly by an unauthenticated remote attacker. Consequently, the practical risk is constrained to a local denial of service through kernel crashes under specific race conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.