CVE-2024-42256

A flaw was found in the Linux kernel's Common Internet File System (CIFS) client. When a write subrequest requires a retry, the client incorrectly re-selects the server connection during write processing. If a different connection is selected, internal tracking counters and credits become mismatched across connection records. A local user performing file operations against multichannel network shares can trigger this flaw, potentially leading to kernel instability and a Denial of Service (DoS).

This vulnerability is evaluated as having Low severity for Red Hat Enterprise Linux because the susceptible code path is absent from enterprise kernels and exploitation demands specialized SMB multichannel configurations. Triggering this flaw requires an active CIFS connection engaging in multichannel communication alongside network write retry operations to cause internal counter mismatches. Consequently, default Red Hat Enterprise Linux installations are not exposed to this issue, limiting any potential impact to upstream environments running newer kernel releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.