In the Linux kernel, the following vulnerability has been resolved:

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields")
refactored cifs code to change cifs_tcp_ses_lock for tc_lock around
tc_count changes.

There was missing lock around tc_count increment inside
smb2_find_smb_sess_tcon_unlocked().

https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7

https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41

https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0d

https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416a

https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fd

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["fs/smb/client/smb2transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"953953abb66e52c224057ab91e404284fefeab62","lessThan":"7df1df6f40c0720d30206aa35c0343b962350e0d","versionType":"git","status":"affected"},{"version":"601dd3b79769b38d30b693c40afdb2a4b7edf9d0","lessThan":"13fb413ae22a37c69341918a6d651d19a9b0b9b7","versionType":"git","status":"affected"},{"version":"3969db6b22e3d90d8c5f22ac1a7fe0350a94c136","lessThan":"bf4ebdb19ff9b3cdf992b50715fe61633327416a","versionType":"git","status":"affected"},{"version":"96c4af418586ee9a6aab61738644366426e05316","lessThan":"e374f4e496fef8168784f93a4477d67be34485fd","versionType":"git","status":"affected"},{"version":"96c4af418586ee9a6aab61738644366426e05316","lessThan":"4d8690dace005a38e6dbde9ecce2da3ad85c7c41","versionType":"git","status":"affected"},{"version":"8c59eeeeffa1524ef57e173a89a1a3ff539888d5","versionType":"git","status":"affected"},{"version":"6.6.128","lessThan":"6.6.142","versionType":"semver","status":"affected"},{"version":"6.12.75","lessThan":"6.12.92","versionType":"semver","status":"affected"},{"version":"6.18.16","lessThan":"6.18.34","versionType":"semver","status":"affected"},{"version":"6.19.6","lessThan":"6.20","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["fs/smb/client/smb2transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"7.0","status":"affected"},{"version":"0","lessThan":"7.0","versionType":"semver","status":"unaffected"},{"version":"6.6.142","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.92","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.34","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.0.11","lessThanOrEqual":"7.0.*","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]