CVE-2024-49988: ksmbd: add refcnt to ksmbd_conn struct
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: add refcnt to ksmbdconn struct
When sending an oplock break request, opinfo->conn is used, But freed ->conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when it is no longer used.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.57.1-2 - Upgrade
Upgrade
Linux kernel (ksmbd)to a version that resolves this vulnerability.Patch ksmbd: add refcnt to ksmbd_conn struct
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49988?
CVE-2024-49988 has been designated a moderate severity vulnerability.
How do I fix CVE-2024-49988?
To fix CVE-2024-49988, you should update the Linux kernel to a version later than 6.6.55 or within the specified range for affected versions.
What are the affected versions for CVE-2024-49988?
CVE-2024-49988 affects Linux kernel versions between 6.7 and 6.10.14, as well as 6.11 to 6.11.3.
What type of vulnerability is CVE-2024-49988?
CVE-2024-49988 is a memory management vulnerability related to the handling of the ksmbd_conn structure in the Linux kernel.
Is CVE-2024-49988 exploitable in a production environment?
Yes, CVE-2024-49988 is potentially exploitable in a production environment, especially in systems utilizing multichannel SMB protocol.