by Kastro
Paper/Archive/CVE-2024-50286

CVE-2024-50286

Linux Linux — ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.0.520 × 2010.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is a race condition between ksmbd_smb2_session_create and ksmbd_expire_session. This patch add missing sessions_table_lock while adding/deleting session from global session table.

Affected

ProductAffectedFixed inSource
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < f56446ba5378d19e31040b548a14ee9a8f1500eaf56446ba5378d19e31040b548a14ee9a8f1500eaCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < e923503a56b3385b64ae492e3225e4623f560c5be923503a56b3385b64ae492e3225e4623f560c5bCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < e7a2ad2044377853cf8c59528dac808a08a99c72e7a2ad2044377853cf8c59528dac808a08a99c72CNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 0a77715db22611df50b178374c51e2ba0d58866e0a77715db22611df50b178374c51e2ba0d58866eCNA
Linux5.15–CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgit.kernel.org/stable/c/f56446ba5378d19e31040b548a14ee9a8f1500earefgit.kernel.org/stable/c/e923503a56b3385b64ae492e3225e4623f560c5brefgit.kernel.org/stable/c/e7a2ad2044377853cf8c59528dac808a08a99c72refgit.kernel.org/stable/c/0a77715db22611df50b178374c51e2ba0d58866ereflists.debian.org/debian-lts-announce/2025/01/msg00001.html