Riskcovery

CVE-2024-49988

ksmbd: add refcnt to ksmbd_conn struct

State
Published
Severity
8.8 High
Published
Oct 21, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: add refcnt to ksmbd_conn struct

When sending an oplock break request, opinfo->conn is used, But freed ->conn can be used on multichannel. This patch add a reference count to the ksmbd_conn struct so that it can be freed when it is no longer used.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 18f06bacc197d4ac9b518ad1c69999bc3d83e7aaAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 9fd3cde4628bcd3549ab95061f2bab74d2ed4f3bAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before e9dac92f4482a382e8c0fe1bc243da5fc3526b0cAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before ee426bfb9d09b29987369b897fe9b6485ac2be27Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.