CVE-2024-35864

A use-after-free flaw was found in the Linux kernel in smb smb2_is_valid_lease_break() when exiting a session. This flaw allows a local attacker to crash the system.

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires a race condition during SMB session teardown, and its consequences are limited to a local denial of service via a kernel crash. The issue only affects hosts actively using the kernel SMB/CIFS client to connect to network shares, which is not loaded or mounted by default in typical enterprise deployments. Unprivileged local users without access to trigger or interact with active CIFS mounts cannot induce this condition, significantly restricting practical exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.