CVE-2024-46742: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

0.0 CVSS

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE)
and parse_lease_state() return NULL.

Fix this by check if 'lease_ctx_info' is NULL.

Additionally, remove the redundant parentheses in
parse_durable_handle_context().

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Vendor: Linux

Product: Linux

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 5.06% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

2024-12-10 00:31:27 UTC
CVE

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()