CVE-2024-56729

In the Linux kernel, the following vulnerability has been resolved:

smb: Initialize cfid->tcon before performing network ops

Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cached_dir_lease_break() and then fail to release the ref in cached_dir_offload_close, since cfid->tcon is still NULL.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires winning a specific race condition on active SMB mounts to cause a denial of service. Under standard enterprise configurations, the CIFS client is only loaded and exposed when remote network shares are mounted. An authenticated local user interacting with cached directories could induce an unreleased connection reference, potentially causing kernel resource exhaustion over time without compromising system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.