CVE-2024-46796
A bug in the Linux kernel’s SMB client caused a memory error that could crash the system. The issue was fixed by correcting a double release of a file reference. Users should update their kernel to a patched version.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel 6.11 and earlier versions that have not applied the patch, especially systems that use SMB/CIFS file shares.
Real-world impact
An attacker could cause the kernel to crash, leading to a denial‑of‑service, or potentially exploit the memory corruption to gain higher privileges.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited remotely with no authentication and can completely compromise confidentiality, integrity, and availability of the system.
What to do about it
- 011. Update the Linux kernel to a version that includes the fix (e.g., 6.11 or later).
- 022. Verify the kernel version after the update.
NVD-referenced vendor advisory
Timeline
- Sep 18, 2024 · Sep 18, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.