Vulnerability in the Linux Kernel Affecting SMB Network Operations

CVE-2024-56729

Summary

A vulnerability in the Linux kernel impacts SMB network operations due to improper initialization of the 'cfid->tcon' field prior to executing network operations. This oversight can lead to a scenario where a lease break occurs concurrently with the opening of a cached directory. As a result, the process may inadvertently retain a reference to the tcon in the 'cached_dir_lease_break()' function. However, it might fail to release this reference properly in the 'cached_dir_offload_close()' function due to the 'cfid->tcon' being uninitialized (NULL). Addressing this vulnerability is essential to maintain filesystem integrity and prevent potential exploitation through reference leakage.

References