CVE-2024-56729

Summary

CVE-2024-56729 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies within the smb subsystem, specifically concerning the initialization of cfid->tcon before network operations. This oversight could result in a tcon reference leak, leading to potential race conditions. When a lease break races with opening a cached directory, the processing of the leak break may inadvertently obtain a reference to the tcon in cached_dir_lease_break(). However, cfid->tcon remains NULL in cached_dir_offload_close, resulting in the reference not being released effectively.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.