CVE-2024-35998

A flaw was found in the Linux kernel's SMB3 client component. This vulnerability allows an authenticated local user to cause a Denial of Service (DoS) by triggering an improper lock sequence during concurrent network file operations. Due to a lock order reversal in the cifs_sync_mid_result function, conflicting threads can enter a deadlock where processes wait on each other indefinitely, causing the system to hang.

A moderate severity denial of service flaw was found in the Linux kernel SMB3 client. Due to a lock order reversal in the cifs_sync_mid_result function, an authenticated local user can trigger a deadlock by performing concurrent SMB3 network file operations: conflicting threads wait on each other indefinitely, causing the system to hang. Only availability is affected; the flaw has no impact on confidentiality or integrity.

All Red Hat Enterprise Linux 6, 7, 8 and 9 kernel and kernel-rt streams, including the z-stream update streams, as well as the Hosted OpenShift Clusters (OSD and ARO) offerings, are not affected because the vulnerable code is not present in the Red Hat kernel builds. The Fedora community distribution is affected, and a fix is being pursued through the upstream kernel updates under a DELEGATED resolution.

Red Hat rates this flaw Moderate (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). This differs from the CVE.org record, which scores the flaw 7.5 Important with a network attack vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H): Red Hat assesses that triggering the deadlock requires an authenticated local user able to issue concurrent CIFS operations rather than a remote unauthenticated attacker.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.