← CVE Intelligence

CVE-2024-50283

ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_session_put should be called under smb3_preauth_hash_rsp(). It will avoid freeing session before calling smb3_preauth_hash_rsp().

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 0626e6641f6b467447c81dd7678a69c66f7746cf before cb645064e0811053c94e86677f2e58ed29359d62; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before f7557bbca40d4ca8bb1c6c940ac6c95078bd0827; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before c6cdc08c25a868a08068dfc319fa9fce982b8e7f; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 1b6ad475d4ed577d34e0157eb507be00c588bf5c; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before b8fc56fbca7482c1e5c0e3351c6ae78982e25ada
Linux / Linuxaffected 5.15; unaffected 0 before 5.15; unaffected 5.15.174 through 5.15.*; unaffected 6.1.117 through 6.1.*; unaffected 6.6.61 through 6.6.*; unaffected 6.11.8 through 6.11.*; unaffected 6.12 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.