CVE-2024-53179

Summary

CVE-2024-53179 is a use-after-free vulnerability affecting the Linux kernel's SMB (Server Message Block) client. The issue arises from a race condition during the mounting of SMB shares, specifically within the functions cifs_send_recv and smb2_calc_signature. The race condition results in a use-after-free of the signing key @ses->auth_key.response, which can be exploited when SES_GOOD or SES_EXITING statuses are not properly checked. To mitigate this vulnerability, the Linux kernel now ensures a valid @ses->auth_key.response before accessing the signing key. Previously, the code made a call to ->logoff() only when @ses was known to be good, making it safe to access the signing key when @ses->ses_status equals SES_EXITING.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.