Riskcovery

CVE-2024-50152

smb: client: fix possible double free in smb2_set_ea()

State
Published
Severity
9.8 Critical
Published
Nov 7, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix possible double free in smb2_set_ea()

Clang static checker(scan-build) warning： fs/smb/client/smb2ops.c:1304:2: Attempt to free released memory. 1304 | kfree(ea); | ^~~~~~~~~

There is a double free in such case: 'ea is initialized to NULL' -> 'first successful memory allocation for ea' -> 'something failed, goto sea_exit' -> 'first memory release for ea' -> 'goto replay_again' -> 'second goto sea_exit before allocate memory for ea' -> 'second memory release for ea resulted in double free'.

Re-initialie 'ea' to NULL near to the replay_again label, it can fix this double free problem.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 433042a91f9373241307725b52de573933ffedbf to before b1813c220b76f60b1727984794377c4aa849d4c1Affected
  • 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before c9f758ecf2562dfdd4adf12c22921b5de8366123Affected
  • 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 19ebc1e6cab334a8193398d4152deb76019b5d34Affected
  • 6.6.32 to before 6.6.59Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.6.59 through 6.6.*Not affected
  • 6.11.6 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.