CVE-2024-35868: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35868 is a vulnerability discovered in the Linux kernel's SMB client implementation, specifically in the cifs_stats_proc_write() function. The vulnerability was disclosed on May 19, 2024, and affects various versions of the Linux kernel up to (excluding) 6.1.85, versions from 6.2 up to (excluding) 6.6.26, and versions from 6.7 up to (excluding) 6.8.5 (NVD).

The vulnerability is classified as a Use-After-Free (UAF) issue in the cifs_stats_proc_write() function within the SMB client implementation. The issue occurs when accessing sessions that are being torn down (status == SES_EXITING). The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements with low attack complexity (NVD).

The Use-After-Free vulnerability could potentially lead to high impacts on confidentiality, integrity, and availability of the affected system. As indicated by the CVSS score, successful exploitation could result in complete compromise of the system's security objectives, including unauthorized access to sensitive information, system modifications, or service disruptions (NVD).

The vulnerability requires local access and low attack complexity to exploit. An attacker would need local system access and low privileges to attempt exploitation. The vulnerability is related to the SMB client's statistics processing functionality, specifically when handling sessions that are being terminated (NVD).

The vulnerability has been fixed in the Linux kernel through a patch that adds a check to skip sessions that are being torn down. The fix has been implemented in various kernel versions including 6.8.0-38.38 for Ubuntu 24.04 LTS and corresponding versions for other distributions. Users are advised to update their kernel to the patched versions (Ubuntu, Kernel Patch).