CVE-2024-39468high

CVE-2024-39468: high-severity vulnerability in Linux

smb: client: fix deadlock in smb2_find_smb_tcon()

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_smb_ses() to avoid such deadlock.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
References
https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-355557.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-613116.htmlhttps://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615ahttps://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5