{
  "cveId": "CVE-2024-46796",
  "url": "https://patchblox.com/security/cve/CVE-2024-46796",
  "summary": "CVE-2024-46796 is fixed in 26 products on 1 platform, first by DEBIAN-CVE-2024-46796, released September 18, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix double put of @cfile in smb2_se...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix double put of @cfile in smb2_set_path_size()  If smb2_compound_op() is called with a valid @cfile and returned -EINVAL, we need to call cifs_get_writable_path() before retrying it as the reference of @cfile was already dropped by previous call.  This fixes the following KASAN splat when running fstests generic/013 against Windows Server 2022:    CIFS: Attempting to mount //w22-fs0/scratch   run fstests generic/013 at 2024-09-02 19:48:59   ==================================================================   BUG: KASAN: slab-use-after-free in detach_if_pending\u002B0xab/0x200   Write of size 8 at addr ffff88811f1a3730 by task kworker/3:2/176    CPU: 3 UID: 0 PID: 176 Comm: kworker/3:2 Not tainted 6.11.0-rc6 #2   Hardware name: QEMU Standard PC (Q35 \u002B ICH9, 2009), BIOS 1.16.3-2.fc40   04/01/2014   Workqueue: cifsoplockd cifs_oplock_break [cifs]   Call Trace:    \u003CTASK\u003E    dump_stack_lvl\u002B0x5d/0x80    ? detach_if_pending\u002B0xab/0x200    print_report\u002B0x156/0x4d9    ? detach_if_pending\u002B0xab/0x200    ? __virt_addr_valid\u002B0x145/0x300    ? __phys_addr\u002B0x46/0x90    ? detach_if_pending\u002B0xab/0x200    kasan_report\u002B0xda/0x110    ? detach_if_pending\u002B0xab/0x200    detach_if_pending\u002B0xab/0x200    timer_delete\u002B0x96/0xe0    ? __pfx_timer_delete\u002B0x10/0x10    ? rcu_is_watching\u002B0x20/0x50    try_to_grab_pending\u002B0x46/0x3b0    __cancel_work\u002B0x89/0x1b0    ? __pfx___cancel_work\u002B0x10/0x10    ? kasan_save_track\u002B0x14/0x30    cifs_close_deferred_file\u002B0x110/0x2c0 [cifs]    ? __pfx_cifs_close_deferred_file\u002B0x10/0x10 [cifs]    ? __pfx_down_read\u002B0x10/0x10    cifs_oplock_break\u002B0x4c1/0xa50 [cifs]    ? __pfx_cifs_oplock_break\u002B0x10/0x10 [cifs]    ? lock_is_held_type\u002B0x85/0xf0    ? mark_held_locks\u002B0x1a/0x90    process_one_work\u002B0x4c6/0x9f0    ? find_held_lock\u002B0x8a/0xa0    ? __pfx_process_one_work\u002B0x10/0x10    ? lock_acquired\u002B0x220/0x550    ? __list_add_valid_or_report\u002B0x37/0x100    worker_thread\u002B0x2e4/0x570    ? __kthread_parkme\u002B0xd1/0xf0    ? __pfx_worker_thread\u002B0x10/0x10    kthread\u002B0x17f/0x1c0    ? kthread\u002B0xda/0x1c0    ? __pfx_kthread\u002B0x10/0x10    ret_from_fork\u002B0x31/0x60    ? __pfx_kthread\u002B0x10/0x10    ret_from_fork_asm\u002B0x1a/0x30    \u003C/TASK\u003E    Allocated by task 1118:    kasan_save_stack\u002B0x30/0x50    kasan_save_track\u002B0x14/0x30    __kasan_kmalloc\u002B0xaa/0xb0    cifs_new_fileinfo\u002B0xc8/0x9d0 [cifs]    cifs_atomic_open\u002B0x467/0x770 [cifs]    lookup_open.isra.0\u002B0x665/0x8b0    path_openat\u002B0x4c3/0x1380    do_filp_open\u002B0x167/0x270    do_sys_openat2\u002B0x129/0x160    __x64_sys_creat\u002B0xad/0xe0    do_syscall_64\u002B0xbb/0x1d0    entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f    Freed by task 83:    kasan_save_stack\u002B0x30/0x50    kasan_save_track\u002B0x14/0x30    kasan_save_free_info\u002B0x3b/0x70    poison_slab_object\u002B0xe9/0x160    __kasan_slab_free\u002B0x32/0x50    kfree\u002B0xf2/0x300    process_one_work\u002B0x4c6/0x9f0    worker_thread\u002B0x2e4/0x570    kthread\u002B0x17f/0x1c0    ret_from_fork\u002B0x31/0x60    ret_from_fork_asm\u002B0x1a/0x30    Last potentially related work creation:    kasan_save_stack\u002B0x30/0x50    __kasan_record_aux_stack\u002B0xad/0xc0    insert_work\u002B0x29/0xe0    __queue_work\u002B0x5ea/0x760    queue_work_on\u002B0x6d/0x90    _cifsFileInfo_put\u002B0x3f6/0x770 [cifs]    smb2_compound_op\u002B0x911/0x3940 [cifs]    smb2_set_path_size\u002B0x228/0x270 [cifs]    cifs_set_file_size\u002B0x197/0x460 [cifs]    cifs_setattr\u002B0xd9c/0x14b0 [cifs]    notify_change\u002B0x4e3/0x740    do_truncate\u002B0xfa/0x180    vfs_truncate\u002B0x195/0x200    __x64_sys_truncate\u002B0x109/0x150    do_syscall_64\u002B0xbb/0x1d0    entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f",
  "published": "2024-09-18T08:15:06Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00443,
  "epssPercentile": 0.38745,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco_debug",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2.150600.12.20.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2.150600.12.20.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_10",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.5.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_10",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.5.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.34.1",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.34.1",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.10.11-1",
      "fix": "DEBIAN-CVE-2024-46796",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-46796",
      "released": "2024-09-18T08:15:06Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.10.11-1",
      "fix": "DEBIAN-CVE-2024-46796",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-46796",
      "released": "2024-09-18T08:15:06Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}