Answer in brief
CVE-2024-35867 records a Unknown severity vulnerability in smb: client: fix potential UAF in cifs_stats_proc_show(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-35867 records a Unknown severity vulnerability in smb: client: fix potential UAF in cifs_stats_proc_show(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <838ec01ea8d3deb5d123e8ed9022e8162dc3f503 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <bb6570085826291dc392005f9fec16ea5da3c8ad || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <16b7d785775eb03929766819415055e367398f49 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <c3cf8b74c57924c0985e49a1fdf02d3395111f39 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <1e12f0d5c66f07c934041621351973a116fa13c7 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <0865ffefea197b437ba78b5dd8d8e256253efd65 || a67172a013953664b1dad03c648200c70b90506c || >=3.12.48 <3.13 | 838ec01ea8d3deb5d123e8ed9022e8162dc3f503, bb6570085826291dc392005f9fec16ea5da3c8ad, 16b7d785775eb03929766819415055e367398f49, c3cf8b74c57924c0985e49a1fdf02d3395111f39, 1e12f0d5c66f07c934041621351973a116fa13c7, 0865ffefea197b437ba78b5dd8d8e256253efd65, 3.13 |
| Linux/Linuxgeneric | 3.13 | Not reported |
Published upstream
May 19, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <838ec01ea8d3deb5d123e8ed9022e8162dc3f503 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <bb6570085826291dc392005f9fec16ea5da3c8ad || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <16b7d785775eb03929766819415055e367398f49 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <c3cf8b74c57924c0985e49a1fdf02d3395111f39 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <1e12f0d5c66f07c934041621351973a116fa13c7 || >=7f48558e6489d032b1584b0cc9ac4bb11072c034 <0865ffefea197b437ba78b5dd8d8e256253efd65 || a67172a013953664b1dad03c648200c70b90506c || >=3.12.48 <3.13 | 838ec01ea8d3deb5d123e8ed9022e8162dc3f503, bb6570085826291dc392005f9fec16ea5da3c8ad, 16b7d785775eb03929766819415055e367398f49, c3cf8b74c57924c0985e49a1fdf02d3395111f39, 1e12f0d5c66f07c934041621351973a116fa13c7, 0865ffefea197b437ba78b5dd8d8e256253efd65, 3.13 |
| Linux/Linuxgeneric | 3.13 | Not reported |
Published upstream
May 19, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
Quoted source text, attributed separately from HOL analysis.