CVE-2024-35862

A use-after-free flaw was found in the Linux kernel in smb smb2_is_network_name_deleted() when exiting a session. This flaw allows a local attacker to crash the system.

This vulnerability is rated as having a Low impact because exploitation is constrained to the SMB client subsystem and requires an existing SMB session being torn down to trigger the race condition. On default Red Hat Enterprise Linux installations, CIFS network shares are not mounted automatically, meaning unprivileged local users cannot trigger the flaw unless an administrative SMB mount is actively closing. Furthermore, the issue only results in a denial of service through a kernel crash without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.