CVE-2024-46736

Advisory lineage Upstream: 0 Downstream: 12
Analyzed
Published: 18 Sept 2024, 07:11
Last modified:23 May 2026, 15:53

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Sept 2024, 07:11
Published
Vulnerability first disclosed
23 May 2026, 15:53
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_rename_path() If smb2_set_path_attr() is called with a valid @cfile and returned -EINVAL, we need to call cifs_get_writable_path() again as the reference of @cfile was already dropped by previous smb2_compound_op() call.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 2%

Techniques & Countermeasures

  • CWE-415•Double Free

    The product calls free() twice on the same memory address.

Affected Systems

  • linux•linux

    ≥ 1e60bc0e954389af82f1d9a85f13a63f6572350f, < b27ea9c96efd2c252a981fb00d0f001b86c90f3e | ≥ 71f15c90e785d1de4bcd65a279e7256684c25c0d, < 1a46c7f6546b73cbf36f5a618a1a6bbb45391eb3 | ≥ 71f15c90e785d1de4bcd65a279e7256684c25c0d, < 3523a3df03c6f04f7ea9c2e7050102657e331a4f | ≥ 6.6.32, < 6.6.51 | 6.9

  • linux•linux_kernel

    ≥ 6.6.32, < 6.6.51 | ≥ 6.9, < 6.10.10 | 6.11:rc1 | 6.11:rc2 | 6.11:rc3 | 6.11:rc4 | 6.11:rc5 | 6.11:rc6

References (3)