Vulnary
← back to the feed
Critical· 9.8official fix available

CVE-2024-35869

A use-after-free vulnerability (CWE-416) in the Linux kernel's SMB client can occur when processing DFS referrals, mounting, or performing DFS failover, potentially allowing an attacker to execute arbitrary code. The flaw is rated critical with a CVSS base score of 9.8. The issue has been resolved in the Linux kernel.

publishedMay 19, 2024
last modifiedAug 4, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
17th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Sep 4, 2026

An official fix is available, so this entry is kept for 30 days and then removed automatically.

01

Who is affected

Linux kernel

02

Real-world impact

Potential remote code execution via SMB DFS handling.

03

Why this severity

CVSS 9.8 (Critical) reflects network‑adjacent attack with low complexity, no privileges or user interaction needed, and high impact on confidentiality, integrity, and availability.

04

What to do about it

official fix available
recommended steps
  1. 01Update the Linux kernel to a version that includes the fix for CVE-2024-35869 (as indicated by the NVD description that the vulnerability has been resolved).

NVD-referenced vendor advisory (Linux kernel)

05

Timeline

  1. May 19, 2024 · May 19, 2024
    Published
    Disclosed and added to the National Vulnerability Database.
  2. Aug 4, 2026 · 2d ago
    Advisory updated
    The NVD record was last revised.
  3. Aug 5, 2026 · 1d ago
    Official fix available
    A vendor patch or mitigation now exists — see the remediation steps above.
06

How it’s attacked

Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07

References & advisories

NVD advisory ↗Search advisories ↗
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →