What is the severity of CVE-2024-50286?

CVE-2024-50286 is classified as a critical vulnerability due to its potential to lead to a use-after-free condition in the Linux kernel.

How do I fix CVE-2024-50286?

To mitigate CVE-2024-50286, users should upgrade to the latest version of the Linux kernel that includes the relevant patch.

What versions of the Linux kernel are affected by CVE-2024-50286?

CVE-2024-50286 affects multiple versions of the Linux kernel from 6.1.117 up to but not including 6.2, as well as several release candidate versions of 6.12.

What does CVE-2024-50286 involve?

CVE-2024-50286 involves a race condition between session creation and expiration in the ksmbd module of the Linux kernel.

Is CVE-2024-50286 related to any other vulnerabilities?

CVE-2024-50286 specifically addresses issues within the ksmbd service, but it may have implications for systems relying on similar networking functionalities.

Vulnerability/
CVE-2024-50286

high

CWE

416 362

19/11/2024

19/12/2024

CVE-2024-50286: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

First published: Tue Nov 19 2024(Updated: )

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is a race condition between ksmbd_smb2_session_create and ksmbd_expire_session. This patch add missing sessions_table_lock while adding/deleting session from global session table.

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected Software	Affected Version	How to fix
Linux Kernel	<6.1.117
Linux Kernel	>=6.2<6.6.61
Linux Kernel	>=6.7<6.11.8
Linux Kernel	=6.12-rc1
Linux Kernel	=6.12-rc2
Linux Kernel	=6.12-rc3
Linux Kernel	=6.12-rc4
Linux Kernel	=6.12-rc5
Linux Kernel	=6.12-rc6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-50286?
CVE-2024-50286 is classified as a critical vulnerability due to its potential to lead to a use-after-free condition in the Linux kernel.
How do I fix CVE-2024-50286?
To mitigate CVE-2024-50286, users should upgrade to the latest version of the Linux kernel that includes the relevant patch.
What versions of the Linux kernel are affected by CVE-2024-50286?
CVE-2024-50286 affects multiple versions of the Linux kernel from 6.1.117 up to but not including 6.2, as well as several release candidate versions of 6.12.
What does CVE-2024-50286 involve?
CVE-2024-50286 involves a race condition between session creation and expiration in the ksmbd module of the Linux kernel.
Is CVE-2024-50286 related to any other vulnerabilities?
CVE-2024-50286 specifically addresses issues within the ksmbd service, but it may have implications for systems relying on similar networking functionalities.

agent/title
agent/references
agent/type
agent/description
agent/first-publish-date
agent/author
agent/event
agent/remedy
agent/severity
agent/softwarecombine
agent/weakness
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/linux
canonical/linux kernel
version/linux kernel/6.2
version/linux kernel/6.7
version/linux kernel/6.12-rc1
version/linux kernel/6.12-rc2
version/linux kernel/6.12-rc3
version/linux kernel/6.12-rc4
version/linux kernel/6.12-rc5
version/linux kernel/6.12-rc6

Frequently Asked Questions

What is the severity of CVE-2024-50286?
CVE-2024-50286 is classified as a critical vulnerability due to its potential to lead to a use-after-free condition in the Linux kernel.
How do I fix CVE-2024-50286?
To mitigate CVE-2024-50286, users should upgrade to the latest version of the Linux kernel that includes the relevant patch.
What versions of the Linux kernel are affected by CVE-2024-50286?
CVE-2024-50286 affects multiple versions of the Linux kernel from 6.1.117 up to but not including 6.2, as well as several release candidate versions of 6.12.
What does CVE-2024-50286 involve?
CVE-2024-50286 involves a race condition between session creation and expiration in the ksmbd module of the Linux kernel.
Is CVE-2024-50286 related to any other vulnerabilities?
CVE-2024-50286 specifically addresses issues within the ksmbd service, but it may have implications for systems relying on similar networking functionalities.

CVE-2024-50286: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

Remedy

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-50286?

How do I fix CVE-2024-50286?

What versions of the Linux kernel are affected by CVE-2024-50286?

What does CVE-2024-50286 involve?

Is CVE-2024-50286 related to any other vulnerabilities?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2024-50286?

How do I fix CVE-2024-50286?

What versions of the Linux kernel are affected by CVE-2024-50286?

What does CVE-2024-50286 involve?

Is CVE-2024-50286 related to any other vulnerabilities?