CVE-2024-35867: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35867 is a vulnerability in the Linux kernel's SMB client implementation, specifically in the cifs_stats_proc_show() function. The vulnerability was discovered and disclosed on May 19, 2024, affecting various versions of the Linux kernel up to versions 6.1.85, 6.6.26, and 6.8.5. The issue involves a potential Use-After-Free (UAF) condition when handling SMB sessions that are being torn down (NVD).

The vulnerability is classified as a Use-After-Free (CWE-416) issue in the SMB client's statistics reporting functionality. The problem occurs in the cifs_stats_proc_show() function when accessing sessions that are in the process of being terminated (status == SES_EXITING). The CVSS v3.1 base score is 7.8 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements but high potential impact (NVD).

The vulnerability could lead to memory corruption through Use-After-Free, potentially allowing an attacker with local access to cause system instability, information disclosure, or privilege escalation. The high CVSS score of 7.8 reflects the serious potential consequences if exploited (NVD).

The vulnerability requires local access to the system and can be triggered through the SMB client's statistics reporting mechanism. No public exploits have been reported at the time of assessment (NVD).

The vulnerability has been patched in the Linux kernel with a fix that skips sessions that are being torn down (status == SES_EXITING) to prevent the UAF condition. The fix has been incorporated into kernel versions 6.1.85, 6.6.26, and 6.8.5 and later. Users are advised to update to these or newer versions (Kernel Patch).