Back to CVE records
High 7.5Published Jun 25, 2024
CVE-2024-39468smb: client: fix deadlock in smb2_find_smb_tcon()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 5 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_smb_ses() to avoid such deadlock.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 78ebec450ef4f0720c592638d92bad679d75d7ce before b055752675cd1d1db4ac9c2750db3dc3e89ea261; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 21f5dd36e655d25a7b45b61c1e537198b671f720; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before b09b556e48968317887a11243a5331a7bc00ece5; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 225de871ddf994f69a57f035709cad9c0ab8615a; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 8d0f5f1ccf675454a833a573c53830a49b7d1a47; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 02c418774f76a0a36a6195c9dbf8971eb4130a15 | CNA record |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V3.1 | CISA ADP |
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name) | all versions not affected | CISA ADP |
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name) | before V3.1 | CISA ADP |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | before 5.10.221; from 5.11 before 5.15.162; from 5.16 before 6.1.94; from 6.2 before 6.6.34; from 6.7 before 6.9.5; 6.10; 6.10 | NVD |
References
- https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261patch
- https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720patch
- https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5patch
- https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615apatch
- https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47patch
- https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15patch
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.