# Connector security patch advisory - 14.3.17 *Product: Cloudbrink Connector* *Release: 14.3.17* *Date: July 2025* *Introduction* *Cloudbrink has identified and resolved the list of security vulnerabilities given below in the release version 14.3.17. These vulnerability fixes are applicable to Brink Connector component, which is deployed inside the customer network, both on-prem and/or on the Cloud datacenters. It is strongly recommended that customers upgrade their Connectors to this new patched release for improved security risk and threat mitigation.* #### *Vulnerabilities resolved in this release*


Severity	CVE	Component	Brief
High	CVE-2024- 57798	drm/dp_mst	Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
High	CVE-2024- 56658	xfrm4_net_init	Slab Use-After-Free Vulnerability in networking subsystem
High	CVE-2024- 56598		Array-index-out-of-bounds in Journaled File System (JFS) dtReadFirst function
High	CVE-2024-56595		Array index out-of-bounds in JFS dbAdjTree function (negative 'lp' value)
High	CVE-2024-35864	smb	fix potential UAF in smb2_is_valid_lease_break
High	CVE-2024-26928	smb	fix potential UAF in cifs_debug_files_proc_show()
High	CVE-2024-53140	Netlink	terminate outstanding dump on socket close Netlink supports iterative dumping of data

#### Open vulnerabilities in this release


Severity	CVE	Brief	Comments
High	CVE-2024-50047	Linux kernel SMB client Use-After-Free (UAF) in async decryption	Connector does not encrypt/decrypt app traffic, hence not applicable
High	CVE-2024-3661	TunnelVision VPN Bypass Vulnerability	DHCP route option (121) not used by Connector
High	CVE-2024-31449	Redis Lua Library Remote Code Execution	Connector does not listen on any open ports

#### Contact For further information or to report issues, contact the Cloudbrink Security Team at --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.cloudbrink.com/release-notes/security-advisory/connector-security-patch-advisory-14.3.17.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.