CVE-2024-35999 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 ("Data race condition (MISSING_LOCK)")

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e
https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00
https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887
https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729
https://lore.kernel.org/linux-cve-announce/2024052023-CVE-2024-35999-da29@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-35999
https://www.cve.org/CVERecord?id=CVE-2024-35999

History

Tue, 29 Oct 2024 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-20T09:48:01.653Z

Updated: 2024-12-19T08:59:56.713Z

Reserved: 2024-05-17T13:50:33.149Z

Link: CVE-2024-35999

Vulnrichment

Updated: 2024-08-02T03:30:13.189Z

NVD

Status : Awaiting Analysis

Published: 2024-05-20T10:15:14.100

Modified: 2024-11-21T09:21:23.977

Link: CVE-2024-35999

Redhat

Severity : Moderate

Publid Date: 2024-05-20T00:00:00Z

Links: CVE-2024-35999 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-35999", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-17T13:50:33.149Z", "datePublished": "2024-05-20T09:48:01.653Z", "dateUpdated": "2024-12-19T08:59:56.713Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:59:56.713Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: missing lock when picking channel\n\nCoverity spotted a place where we should have been holding the\nchannel lock when accessing the ses channel index.\n\nAddresses-Coverity: 1582039 (\"Data race condition (MISSING_LOCK)\")"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/transport.c"], "versions": [{"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "98c7ed29cd754ae7475dc7cb3f33399fda902729", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "0fcf7e219448e937681216353c9a58abae6d3c2e", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "60ab245292280905603bc0d3654f4cf8fceccb00", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "8094a600245e9b28eb36a13036f202ad67c1f887", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/transport.c"], "versions": [{"version": "6.1.91", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.30", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8.9", "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729"}, {"url": "https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e"}, {"url": "https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00"}, {"url": "https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887"}], "title": "smb3: missing lock when picking channel", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-05-31T18:47:15.980890Z", "id": "CVE-2024-35999", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-29T20:01:44.554Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:30:13.189Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:30:13.189Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-35999", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-31T18:47:15.980890Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-31T18:47:20.207Z"}}], "cna": {"title": "smb3: missing lock when picking channel", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "98c7ed29cd75", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "0fcf7e219448", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "60ab24529228", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "8094a600245e", "versionType": "git"}], "programFiles": ["fs/smb/client/transport.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "6.1.91", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.30", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.8.9", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/smb/client/transport.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729"}, {"url": "https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e"}, {"url": "https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00"}, {"url": "https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: missing lock when picking channel\n\nCoverity spotted a place where we should have been holding the\nchannel lock when accessing the ses channel index.\n\nAddresses-Coverity: 1582039 (\"Data race condition (MISSING_LOCK)\")"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:26:31.223Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35999", "state": "PUBLISHED", "dateUpdated": "2024-11-05T09:26:31.223Z", "dateReserved": "2024-05-17T13:50:33.149Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-20T09:48:01.653Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: missing lock when picking channel\n\nCoverity spotted a place where we should have been holding the\nchannel lock when accessing the ses channel index.\n\nAddresses-Coverity: 1582039 (\"Data race condition (MISSING_LOCK)\")"}, {"lang": "es", "value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: smb3: falta el bloqueo al seleccionar el canal. Coverity detect\u00f3 un lugar donde deber\u00edamos haber mantenido el bloqueo del canal al acceder al \u00edndice del canal ses. Direcciones-Cobertura: 1582039 (\"Condici\u00f3n de ejecuci\u00f3n de datos (MISSING_LOCK)\")"}], "id": "CVE-2024-35999", "lastModified": "2024-11-21T09:21:23.977", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-05-20T10:15:14.100", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/0fcf7e219448e937681216353c9a58abae6d3c2e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/60ab245292280905603bc0d3654f4cf8fceccb00"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/8094a600245e9b28eb36a13036f202ad67c1f887"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/98c7ed29cd754ae7475dc7cb3f33399fda902729"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}