CVE-2024-46742

Advisory lineage Upstream: 0 Downstream: 16
Modified
Published: 18 Sept 2024, 07:12
Last modified:11 May 2026, 20:35

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Sept 2024, 07:12
Published
Vulnerability first disclosed
11 May 2026, 20:35
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL. Fix this by check if 'lease_ctx_info' is NULL. Additionally, remove the redundant parentheses in parse_durable_handle_context().

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 2%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 878f32878351104448b86ef5b85d1f8ed6f599fb | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < ec28c35029b7930f31117f9284874b63bea4f31b | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 07f384c5be1f8633b13f0a22616e227570450bc6 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 3b692794b81f2ecad69a4adbba687f3836824ada | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 4e8771a3666c8f216eefd6bd2fd50121c6c437db | 5.15

  • linux•linux_kernel

    < 6.6.51 | ≥ 6.7, < 6.10.10 | 6.11:rc1 | 6.11:rc2 | 6.11:rc3 | 6.11:rc4

References (6)