{"vulnerability": "cve-2024-3586", "sightings": [{"uuid": "049483b3-2813-4fed-a448-079d256bc3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35866", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2rbipxndc2f", "content": "", "creation_timestamp": "2025-10-09T13:34:51.372643Z"}, {"uuid": "5af19d6e-ed9a-4e45-9339-d489e90dc8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-35865", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7b7710e5-440d-4500-940b-d83b1dc5dec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-35862", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "255e4c65-d8ca-43ca-a8a3-761cc0bbb84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-35868", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7f9e1f7d-49d1-44ba-a748-ad856e894295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35869", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "63c3020c-bd7b-4bc7-8952-df43743be73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35863", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9fe98f90-ed38-4b03-8ca6-3074f3a73547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35862", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e969bcd3-0315-4412-8397-17ad4f596cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35864", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "48558d49-6e5f-4ae5-82a3-0034bfc28918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35865", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "7a03fb36-01e1-4061-93d0-7ab729769fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35861", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "39f15d5c-aefa-4149-aa0d-39ca25427cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35868", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f0302e16-da1c-405a-b807-d40f848db09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35867", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "2901f78b-b4c1-4fcf-9fc7-7c36a1b444e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35866", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "3441039d-0beb-4756-942a-933ebe25814d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35860", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-35860\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: support deferring bpf_link dealloc to after RCU grace period\n\nBPF link for some program types is passed as a \"context\" which can be\nused by those BPF programs to look up additional information. E.g., for\nmulti-kprobes and multi-uprobes, link is used to fetch BPF cookie values.\n\nBecause of this runtime dependency, when bpf_link refcnt drops to zero\nthere could still be active BPF programs running accessing link data.\n\nThis patch adds generic support to defer bpf_link dealloc callback to\nafter RCU GP, if requested. This is done by exposing two different\ndeallocation callbacks, one synchronous and one deferred. If deferred\none is provided, bpf_link_free() will schedule dealloc_deferred()\ncallback to happen after RCU GP.\n\nBPF is using two flavors of RCU: \"classic\" non-sleepable one and RCU\ntasks trace one. The latter is used when sleepable BPF programs are\nused. bpf_link_free() accommodates that by checking underlying BPF\nprogram's sleepable flag, and goes either through normal RCU GP only for\nnon-sleepable, or through RCU tasks trace GP *and* then normal RCU GP\n(taking into account rcu_trace_implies_rcu_gp() optimization), if BPF\nprogram is sleepable.\n\nWe use this for multi-kprobe and multi-uprobe links, which dereference\nlink during program run. We also preventively switch raw_tp link to use\ndeferred dealloc callback, as upcoming changes in bpf-next tree expose\nraw_tp link data (specifically, cookie value) to BPF program at runtime\nas well.\n\ud83d\udccf Published: 2024-05-19T08:34:19.368Z\n\ud83d\udccf Modified: 2025-05-04T09:07:03.105Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/876941f533e7b47fc69977fc4551c02f2d18af97\n2. https://git.kernel.org/stable/c/5d8d447777564b35f67000e7838e7ccb64d525c8\n3. https://git.kernel.org/stable/c/1a80dbcb2dbaf6e4c216e62e30fa7d3daa8001ce", "creation_timestamp": "2025-05-04T09:17:58.000000Z"}, {"uuid": "78203c5b-a686-4837-858c-0523f43bfb3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35861", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-35861\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.\n\ud83d\udccf Published: 2024-05-19T08:34:20.364Z\n\ud83d\udccf Modified: 2025-05-04T09:07:04.611Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/7e8360ac8774e19b0b25f44fff84a105bb2417e4\n2. https://git.kernel.org/stable/c/2cfff21732132e363b4cc275d63ea98f1af726c1\n3. https://git.kernel.org/stable/c/f9a96a7ad1e8d25dc6662bc7552e0752de74a20d\n4. https://git.kernel.org/stable/c/e0e50401cc3921c9eaf1b0e667db174519ea939f", "creation_timestamp": "2025-05-04T09:17:57.000000Z"}, {"uuid": "462e8b3c-87cd-4385-8764-77c0913f8364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35864", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-35864\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in smb2_is_valid_lease_break()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.\n\ud83d\udccf Published: 2024-05-19T08:34:22.936Z\n\ud83d\udccf Modified: 2025-05-04T09:07:08.626Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/c868cabdf6fdd61bea54532271f4708254e57fc5\n2. https://git.kernel.org/stable/c/f92739fdd4522c4291277136399353d7c341fae4\n3. https://git.kernel.org/stable/c/a8344e2b69bde63f713b0aa796d70dbeadffddfb\n4. https://git.kernel.org/stable/c/705c76fbf726c7a2f6ff9143d4013b18daaaebf1", "creation_timestamp": "2025-05-04T09:17:56.000000Z"}, {"uuid": "efa75f7d-0a13-4193-a44a-1155475a4e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35866", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-35866\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in cifs_dump_full_key()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.\n\ud83d\udccf Published: 2024-05-19T08:34:24.877Z\n\ud83d\udccf Modified: 2025-05-04T09:07:11.485Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/d798fd98e3563027c5162259ead517057d6fa794\n2. https://git.kernel.org/stable/c/f4a60d360d9114b5085701a3702a0102b0d6d846\n3. https://git.kernel.org/stable/c/10e17ca4000ec34737bde002a13435c38ace2682\n4. https://git.kernel.org/stable/c/3103163ccd3be4adcfa37e15608fb497be044113\n5. https://git.kernel.org/stable/c/58acd1f497162e7d282077f816faa519487be045", "creation_timestamp": "2025-05-04T09:17:55.000000Z"}, {"uuid": "19b4e418-af08-4d02-b690-874c346f8765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35868", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-35868\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in cifs_stats_proc_write()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.\n\ud83d\udccf Published: 2024-05-19T08:34:26.806Z\n\ud83d\udccf Modified: 2025-05-04T09:07:14.108Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/8fefd166fcb368c5fcf48238e3f7c8af829e0a72\n2. https://git.kernel.org/stable/c/cf03020c56d3ed28c4942280957a007b5e9544f7\n3. https://git.kernel.org/stable/c/5b5475ce69f02ecc1b13ea23106e5b89c690429b\n4. https://git.kernel.org/stable/c/d3da25c5ac84430f89875ca7485a3828150a7e0a", "creation_timestamp": "2025-05-04T09:17:54.000000Z"}, {"uuid": "6ef7d86e-2823-4272-bddf-88b538e4226a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35860", "type": "seen", "source": "https://t.me/DARK_SPOT_TEAM/463", "content": "\ud83d\udea8 CVE-2024-35860\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: support deferring bpf_link dealloc to after RCU grace period\n\nBPF link for some program types is passed as a \"context\" which can be\nused by those BPF programs to look up additional information. E.g., for\nmulti-kprobes and multi-uprobes, link is used to fetch BPF cookie values.\n\nBecause of this runtime dependency, when bpf_link refcnt drops to zero\nthere could still be active BPF programs running accessing link data.\n\nThis patch adds generic support to defer bpf_link dealloc callback to\nafter RCU GP, if requested. This is done by exposing two different\ndeallocation callbacks, one synchronous and one deferred. If deferred\none is provided, bpf_link_free() will schedule dealloc_deferred()\ncallback to happen after RCU GP.\n\nBPF is using two flavors of RCU: \"classic\" non-sleepable one and RCU\ntasks trace one. The latter is used when sleepable BPF programs are\nused. bpf_link_free() accommodates that by checking underlying BPF\nprogram's sleepable flag, and goes either through normal RCU GP only for\nnon-sleepable, or through RCU tasks trace GP *and* then normal RCU GP\n(taking into account rcu_trace_implies_rcu_gp() optimization), if BPF\nprogram is sleepable.\n\nWe use this for multi-kprobe and multi-uprobe links, which dereference\nlink during program run. We also preventively switch raw_tp link to use\ndeferred dealloc callback, as upcoming changes in bpf-next tree expose\nraw_tp link data (specifically, cookie value) to BPF program at runtime\nas well.", "creation_timestamp": "2024-05-21T16:55:50.000000Z"}, {"uuid": "0502868f-5a6d-4997-b3b9-12b5b64f91e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35860", "type": "seen", "source": "Telegram/d1j1loFIVuVwPhxJokQwRYBbIsMxD64hi8FhXbQLXswb", "content": "", "creation_timestamp": "2024-05-21T16:55:50.000000Z"}, {"uuid": "29ae46d0-82ca-4400-9a83-fb82ff180f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-35865", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T04:48:27.117472Z"}, {"uuid": "50006411-888b-4e31-a167-729e10faa857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-35865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxgvbnmlbb22", "content": "", "creation_timestamp": "2026-10-09T11:40:05.601742Z"}, {"uuid": "56b314e1-f13b-474f-a0eb-408e4659d781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-35869", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxgwxcbhfk2w", "content": "", "creation_timestamp": "2026-10-09T12:10:05.655830Z"}, {"uuid": "dc77ae63-5bf4-46fb-95cf-071730e47d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117522714486692341", "content": "", "creation_timestamp": "2026-10-29T06:11:50.997073Z"}]}