CVE-2024-50286

ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

HIGH

CVSS Score

Published: November 19, 2024 at 01:30 AM UTC

Updated: August 5, 2026 at 12:05 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7

Exploit prediction

EPSS 0.7%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is a race condition between ksmbd_smb2_session_create and ksmbd_expire_session. This patch add missing sessions_table_lock while adding/deleting session from global session table.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 6.1.1175.15 ≤ v < 6.1.1175.15 ≤ v < 6.11.85.15 ≤ v < 6.125.15 ≤ v < 6.6.616.2 ≤ v < 6.6.616.7 ≤ v < 6.11.86.12 rc1 6.12 rc2 6.12 rc3 6.12 rc4 6.12 rc5 6.12 rc6626e6641f6b467447c81dd7678a69c66f7746cf

Vendor states this is fixed in 0a77715db22611df50b178374c51e2ba0d58866e (fixed)

Vendor states this is fixed in e7a2ad2044377853cf8c59528dac808a08a99c72 (fixed)

Vendor states this is fixed in e923503a56b3385b64ae492e3225e4623f560c5b (fixed)

Vendor states this is fixed in f56446ba5378d19e31040b548a14ee9a8f1500ea (fixed)

Vendor states this is fixed in 5.15 (unaffected)

Vendor states this is fixed in 6.1.117 (unaffected)

Vendor states this is fixed in 6.11.8 (unaffected)

Vendor states this is fixed in 6.12 (unaffected)

Vendor states this is fixed in 6.6.61 (unaffected)