In the Linux kernel, the following vulnerability has been resolved:
smb/server: fix potential null-ptr-deref of leasectxinfo in smb2_open()
null-ptr-deref will occur when (reqoplevel == SMB2OPLOCKLEVELLEASE) and parselease_state() return NULL.
Fix this by check if 'leasectxinfo' is NULL.
Additionally, remove the redundant parentheses in parsedurablehandle_context().
{ "vanir_signatures": [ { "target": { "file": "fs/smb/server/smb2pdu.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "4241616818477471815142371603820428339", "325917023934151390881743136694361706288", "160085414498030925796739303822666070233", "5496769890710351360192689078456168506" ] }, "id": "CVE-2024-46742-130ba1b4", "signature_version": "v1", "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec28c35029b7930f31117f9284874b63bea4f31b" }, { "target": { "file": "fs/ksmbd/smb2pdu.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "4241616818477471815142371603820428339", "325917023934151390881743136694361706288", "160085414498030925796739303822666070233", "5496769890710351360192689078456168506" ] }, "id": "CVE-2024-46742-3d15a974", "signature_version": "v1", "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@878f32878351104448b86ef5b85d1f8ed6f599fb" }, { "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_open" }, "digest": { "length": 20347.0, "function_hash": "277098807417116974749940653105500602930" }, "id": "CVE-2024-46742-5e2b90c1", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07f384c5be1f8633b13f0a22616e227570450bc6" }, { "target": { "file": "fs/smb/server/smb2pdu.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "72603424383841871914899310479181361305", "240961145746685384606612084623706634591", "259306201705070733543384912429233680992", "237014899037812584554780117096455060179", "69099421091596051963145019215722603855", "282620129492113316086449498338752599463", "227053378997362561543856837128868979860", "210520526725263967681648027525711378189", "302458354515198715448232472035222990260", "339345626149840545906930571578291691692", "4241616818477471815142371603820428339", "313349146130719238424552788297080301225", "312849769828826640569028354522949545512", "303553198971538590186831341552770955481" ] }, "id": "CVE-2024-46742-7edd1150", "signature_version": "v1", "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e8771a3666c8f216eefd6bd2fd50121c6c437db" }, { "target": { "file": "fs/smb/server/smb2pdu.c", "function": "parse_durable_handle_context" }, "digest": { "length": 2924.0, "function_hash": "29709212457531634820613452174771875820" }, "id": "CVE-2024-46742-9e23f0b4", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07f384c5be1f8633b13f0a22616e227570450bc6" }, { "target": { "file": "fs/smb/server/smb2pdu.c", "function": "parse_durable_handle_context" }, "digest": { "length": 2924.0, "function_hash": "29709212457531634820613452174771875820" }, "id": "CVE-2024-46742-c3c8bc68", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b692794b81f2ecad69a4adbba687f3836824ada" }, { "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_open" }, "digest": { "length": 20369.0, "function_hash": "315123176607872153708910678820640403855" }, "id": "CVE-2024-46742-ca47797f", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e8771a3666c8f216eefd6bd2fd50121c6c437db" }, { "target": { "file": "fs/smb/server/smb2pdu.c", "function": "parse_durable_handle_context" }, "digest": { "length": 2924.0, "function_hash": "29709212457531634820613452174771875820" }, "id": "CVE-2024-46742-cd918c29", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e8771a3666c8f216eefd6bd2fd50121c6c437db" }, { "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_open" }, "digest": { "length": 18474.0, "function_hash": "337665499700366138029799385913548599488" }, "id": "CVE-2024-46742-e9a77e4f", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec28c35029b7930f31117f9284874b63bea4f31b" }, { "target": { "file": "fs/smb/server/smb2pdu.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "72603424383841871914899310479181361305", "240961145746685384606612084623706634591", "259306201705070733543384912429233680992", "237014899037812584554780117096455060179", "69099421091596051963145019215722603855", "282620129492113316086449498338752599463", "227053378997362561543856837128868979860", "210520526725263967681648027525711378189", "302458354515198715448232472035222990260", "339345626149840545906930571578291691692", "4241616818477471815142371603820428339", "313349146130719238424552788297080301225", "312849769828826640569028354522949545512", "303553198971538590186831341552770955481" ] }, "id": "CVE-2024-46742-f0c9cdcc", "signature_version": "v1", "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07f384c5be1f8633b13f0a22616e227570450bc6" }, { "target": { "file": "fs/smb/server/smb2pdu.c", "function": "smb2_open" }, "digest": { "length": 20347.0, "function_hash": "277098807417116974749940653105500602930" }, "id": "CVE-2024-46742-f2f3a9bb", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b692794b81f2ecad69a4adbba687f3836824ada" }, { "target": { "file": "fs/ksmbd/smb2pdu.c", "function": "smb2_open" }, "digest": { "length": 18344.0, "function_hash": "160865761837186565335055412388843004508" }, "id": "CVE-2024-46742-f383bba7", "signature_version": "v1", "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@878f32878351104448b86ef5b85d1f8ed6f599fb" }, { "target": { "file": "fs/smb/server/smb2pdu.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "72603424383841871914899310479181361305", "240961145746685384606612084623706634591", "259306201705070733543384912429233680992", "237014899037812584554780117096455060179", "69099421091596051963145019215722603855", "282620129492113316086449498338752599463", "227053378997362561543856837128868979860", "210520526725263967681648027525711378189", "302458354515198715448232472035222990260", "339345626149840545906930571578291691692", "4241616818477471815142371603820428339", "313349146130719238424552788297080301225", "312849769828826640569028354522949545512", "303553198971538590186831341552770955481" ] }, "id": "CVE-2024-46742-f6c93243", "signature_version": "v1", "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b692794b81f2ecad69a4adbba687f3836824ada" } ] }