CVE-2024-54680
kernel: smb: client: fix TCP timers deadlock after rmmod
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · January 11, 2025
Updated · October 29, 2026
Description
[REJECTED CVE] A vulnerability was suspected in the Linux kernel's SMB client module related to TCP timers and potential deadlocks after module removal (rmmod cifs). The issue stemmed from incorrect manual manipulation of sk->sk_net_refcnt, which led to TCP timers not being properly cleared, causing lockdep warnings and deadlocks. However, this was an internal kernel misconfiguration affecting cleanup behavior rather than a security flaw exploitable by an attacker. Since no privilege escalation or data exposure was possible, this does not qualify as a security vulnerability.
Statement
This CVE has been rejected upstream: https://lore.kernel.org/linux-cve-announce/2025040219-REJECTED-53c7@gregkh/
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-667 · Improper Locking