High 7.5Published Jun 25, 2024

CVE-2024-39468smb: client: fix deadlock in smb2_find_smb_tcon()

Updated under an hour ago (Oct 27, 2026, 3:10 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_smb_ses() to avoid such deadlock.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 78ebec450ef4f0720c592638d92bad679d75d7ce before b055752675cd1d1db4ac9c2750db3dc3e89ea261; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 21f5dd36e655d25a7b45b61c1e537198b671f720; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before b09b556e48968317887a11243a5331a7bc00ece5; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 225de871ddf994f69a57f035709cad9c0ab8615a; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 8d0f5f1ccf675454a833a573c53830a49b7d1a47; from e695a9ad0305af6e8b0cbc24a54976ac2120cbb3 before 02c418774f76a0a36a6195c9dbf8971eb4130a15	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	before 5.10.221; from 5.11 before 5.15.162; from 5.16 before 6.1.94; from 6.2 before 6.6.34; from 6.7 before 6.9.5; 6.10; 6.10	NVD

References

References

https://git.kernel.org/stable/c/b055752675cd1d1db4ac9c2750db3dc3e89ea261	patch
https://git.kernel.org/stable/c/21f5dd36e655d25a7b45b61c1e537198b671f720	patch
https://git.kernel.org/stable/c/b09b556e48968317887a11243a5331a7bc00ece5	patch
https://git.kernel.org/stable/c/225de871ddf994f69a57f035709cad9c0ab8615a	patch
https://git.kernel.org/stable/c/8d0f5f1ccf675454a833a573c53830a49b7d1a47	patch
https://git.kernel.org/stable/c/02c418774f76a0a36a6195c9dbf8971eb4130a15	patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-355557.html
https://cert-portal.siemens.com/productcert/html/ssa-613116.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.