CVE-2024-50286

ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

State: Published
Severity: 9.8 Critical
Published: Nov 19, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

There is a race condition between ksmbd_smb2_session_create and ksmbd_expire_session. This patch add missing sessions_table_lock while adding/deleting session from global session table.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before f56446ba5378d19e31040b548a14ee9a8f1500eaAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before e923503a56b3385b64ae492e3225e4623f560c5bAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before e7a2ad2044377853cf8c59528dac808a08a99c72Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 0a77715db22611df50b178374c51e2ba0d58866eAffected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.