CVE-2024-50284

ksmbd: Fix the missing xa_store error check

State: Published
Severity: 7.5 High
Published: Nov 19, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: Fix the missing xa_store error check

xa_store() can fail, it return xa_err(-EINVAL) if the entry cannot be stored in an XArray, or xa_err(-ENOMEM) if memory allocation failed, so check error for xa_store() to fix it.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
LinuxLinux	052b41ef2abe274f068e892aee81406f11bd1f3a to before d8664ce789bd46290c59a00da6897252f92c237dAffected b685757c7b08d5073046fb379be965fd6c06aafc to before 726c1568b9145fa13ee248df184b186c382a7ff8Affected b685757c7b08d5073046fb379be965fd6c06aafc to before c2a232c4f790f4bcd4d218904c56ac7a39a448f5Affected b685757c7b08d5073046fb379be965fd6c06aafc to before 3abab905b14f4ba756d413f37f1fb02b708eee93Affected 1f485b54d04a920723984062c912174330a05178Affected 6.1.71 to before 6.1.117Affected 5.15.145 to before 5.16Affected
LinuxLinux	6.3Affected before 6.3Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

052b41ef2abe274f068e892aee81406f11bd1f3a to before d8664ce789bd46290c59a00da6897252f92c237dAffected
b685757c7b08d5073046fb379be965fd6c06aafc to before 726c1568b9145fa13ee248df184b186c382a7ff8Affected
b685757c7b08d5073046fb379be965fd6c06aafc to before c2a232c4f790f4bcd4d218904c56ac7a39a448f5Affected
b685757c7b08d5073046fb379be965fd6c06aafc to before 3abab905b14f4ba756d413f37f1fb02b708eee93Affected
1f485b54d04a920723984062c912174330a05178Affected
6.1.71 to before 6.1.117Affected
5.15.145 to before 5.16Affected

LinuxLinux

6.3Affected
before 6.3Not affected
6.1.117 through 6.1.*Not affected
6.6.61 through 6.6.*Not affected
6.11.8 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.