CVE-2024-56729

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-56729
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56729.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-56729
Downstream
Related
Published
2024-12-29T11:30:07Z
Modified
2025-10-17T19:30:07.150877Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
smb: Initialize cfid->tcon before performing network ops
Details

In the Linux kernel, the following vulnerability has been resolved:

smb: Initialize cfid->tcon before performing network ops

Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cacheddirleasebreak() and then fail to release the ref in cacheddiroffloadclose, since cfid->tcon is still NULL.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ebe98f1447bbccf8228335c62d86af02a0ed23f7
Fixed
625e2357c8fcfae6e66dcc667dc656fe390bab15
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ebe98f1447bbccf8228335c62d86af02a0ed23f7
Fixed
4b216c8f9c7d84ef7de33ca60b97e08e03ef3292
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ebe98f1447bbccf8228335c62d86af02a0ed23f7
Fixed
1b9ab6b648f89441c8a13cb3fd8ca83ffebc5262
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ebe98f1447bbccf8228335c62d86af02a0ed23f7
Fixed
c353ee4fb119a2582d0e011f66a76a38f5cf984d

Affected versions

v6.*

v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.10
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.11.7
v6.11.8
v6.11.9
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.60
v6.6.61
v6.6.62
v6.6.63
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "158393627669020165797181045002184547548",
                "310613021329835263218898005590949274361",
                "167303215448838329079963155716804101566",
                "314758831230705555904843504153490356333",
                "277396677665461328215374078407846642477",
                "177015044871411830242324289107758382182",
                "34034458100249019825697828697763892212",
                "176870363621624359569694056528774236048"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b9ab6b648f89441c8a13cb3fd8ca83ffebc5262",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2024-56729-0145b672",
        "target": {
            "file": "fs/smb/client/cached_dir.c"
        }
    },
    {
        "digest": {
            "function_hash": "195803748400298369041320721943720533999",
            "length": 4846.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b9ab6b648f89441c8a13cb3fd8ca83ffebc5262",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2024-56729-436fe14b",
        "target": {
            "file": "fs/smb/client/cached_dir.c",
            "function": "open_cached_dir"
        }
    },
    {
        "digest": {
            "function_hash": "195803748400298369041320721943720533999",
            "length": 4846.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@625e2357c8fcfae6e66dcc667dc656fe390bab15",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2024-56729-6093138f",
        "target": {
            "file": "fs/smb/client/cached_dir.c",
            "function": "open_cached_dir"
        }
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "158393627669020165797181045002184547548",
                "310613021329835263218898005590949274361",
                "167303215448838329079963155716804101566",
                "314758831230705555904843504153490356333",
                "277396677665461328215374078407846642477",
                "177015044871411830242324289107758382182",
                "34034458100249019825697828697763892212",
                "176870363621624359569694056528774236048"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c353ee4fb119a2582d0e011f66a76a38f5cf984d",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2024-56729-613e1d11",
        "target": {
            "file": "fs/smb/client/cached_dir.c"
        }
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "158393627669020165797181045002184547548",
                "310613021329835263218898005590949274361",
                "167303215448838329079963155716804101566",
                "314758831230705555904843504153490356333",
                "277396677665461328215374078407846642477",
                "177015044871411830242324289107758382182",
                "34034458100249019825697828697763892212",
                "176870363621624359569694056528774236048"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b216c8f9c7d84ef7de33ca60b97e08e03ef3292",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2024-56729-6a884409",
        "target": {
            "file": "fs/smb/client/cached_dir.c"
        }
    },
    {
        "digest": {
            "function_hash": "195803748400298369041320721943720533999",
            "length": 4846.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b216c8f9c7d84ef7de33ca60b97e08e03ef3292",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2024-56729-90a80bf0",
        "target": {
            "file": "fs/smb/client/cached_dir.c",
            "function": "open_cached_dir"
        }
    },
    {
        "digest": {
            "function_hash": "53158178873422535000674721315916497030",
            "length": 4771.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c353ee4fb119a2582d0e011f66a76a38f5cf984d",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2024-56729-cc0a73b6",
        "target": {
            "file": "fs/smb/client/cached_dir.c",
            "function": "open_cached_dir"
        }
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "158393627669020165797181045002184547548",
                "310613021329835263218898005590949274361",
                "167303215448838329079963155716804101566",
                "314758831230705555904843504153490356333",
                "277396677665461328215374078407846642477",
                "177015044871411830242324289107758382182",
                "34034458100249019825697828697763892212",
                "176870363621624359569694056528774236048"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@625e2357c8fcfae6e66dcc667dc656fe390bab15",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2024-56729-ff9f4b9a",
        "target": {
            "file": "fs/smb/client/cached_dir.c"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.6.64
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.11
Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.2