Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-35998 Details

Description

In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result Coverity spotted that the cifs_sync_mid_result function could deadlock "Thread deadlock (ORDER_REVERSAL) lock_order: Calling spin_lock acquires lock TCP_Server_Info.srv_lock while holding lock TCP_Server_Info.mid_lock" Addresses-Coverity: 1590401 ("Thread deadlock (ORDER_REVERSAL)")

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: kernel.orgCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/699f8958dece132709c0bff6a9700999a2a63b75 kernel.orgPatch
https://git.kernel.org/stable/c/8248224ab5b8ca7559b671917c224296a4d671fc kernel.orgPatch
https://git.kernel.org/stable/c/8861fd5180476f45f9e8853db154600469a0284f kernel.orgPatch
https://git.kernel.org/stable/c/c7a4bca289e50bb4b2650f845c41bb3e453f4c66 kernel.orgPatch
https://git.kernel.org/stable/c/699f8958dece132709c0bff6a9700999a2a63b75 CVEPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-667Improper Locking[email protected]

Affected Products

ProductVersions
linux linux kernel
< 6.1.90
>= 6.2, < 6.6.30
>= 6.7, < 6.8.9
6.9 rc1
6.9 rc2

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-35998
NVD Published Date:
May 20, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-35998 Details - Not Deferred