CVE-2024-53177

Summary

CVE-2024-53177 is a vulnerability affecting the Linux kernel's SMB (Server Message Block) subsystem. A use-after-free issue was identified in the open_cached_dir() function, which may occur when an error is encountered while parsing a lease from the server. This error handling may race with receiving a lease break, resulting in the cfid being freed while queued work is still pending. The issue has been resolved by dropping refs rather than directly freeing the cfid, and making related adjustments to the reference counting in cfids_laundromat_worker() and invalidate_all_cached_dirs(). This vulnerability, discovered through KASAN, could potentially lead to a memory leak or other unintended behavior.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.