CVE-2024-35865 addresses a potential Use-After-Free (UAF) vulnerability in the Linux kernel's SMB client, specifically within the smb2_is_valid_oplock_break() function. This flaw, categorized as CWE-416, affects Linux kernel versions and could lead to a denial of service. With a CVSS score of 5.5 (Medium), it requires local access and low privileges, but does not involve user interaction, impacting system availability. Currently, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.1.85CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.2, < 6.6.26CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.8.5CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.9CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:* | ||
6.9CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel vulnerabilities
Jul 24, 2026Linux kernel (NVIDIA Tegra) vulnerabilities
Jul 21, 2026Linux kernel vulnerabilities
Jul 21, 2026kernel: smb: client: fix potential UAF in smb2_is_valid_oplock_break()
May 19, 2024smb: client: fix potential UAF in smb2_is_valid_oplock_break()
May 14, 2024