Critical severity9.8NVD Advisory· Published Feb 22, 2024· Updated Aug 4, 2026

CVE-2024-26592

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on struct tcp_transport in ksmbd_tcp_new_connection() function.

Affected products

Linux/Kernelllm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15.0,<5.15.149
- (no CPE)range: 5.15
osv-coords5 versions
pkg:deb/ubuntu/linux-oem-6.5 pkg:deb/ubuntu/[email protected]?arch=source&distro=mantic pkg:deb/ubuntu/[email protected]?arch=source&distro=mantic pkg:deb/ubuntu/[email protected]?arch=source&distro=mantic pkg:linux/kernel
< 6.5.0-1022.23+ 4 more
- (no CPE)range: < 6.5.0-1022.23
- (no CPE)range: < 6.5.0-1017.20
- (no CPE)range: < 6.5.0-1021.21
- (no CPE)range: < 6.5.0-1024.24
- (no CPE)range: >= 5.15.0, < 5.15.149

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2024-26592

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions