Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-50283 Details

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_session_put should be called under smb3_preauth_hash_rsp(). It will avoid freeing session before calling smb3_preauth_hash_rsp().

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: CISA-ADPCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/1b6ad475d4ed577d34e0157eb507be00c588bf5c kernel.orgPatch
https://git.kernel.org/stable/c/b8fc56fbca7482c1e5c0e3351c6ae78982e25ada kernel.orgPatch
https://git.kernel.org/stable/c/c6cdc08c25a868a08068dfc319fa9fce982b8e7f kernel.orgPatch
https://git.kernel.org/stable/c/cb645064e0811053c94e86677f2e58ed29359d62 kernel.org
https://git.kernel.org/stable/c/f7557bbca40d4ca8bb1c6c940ac6c95078bd0827 kernel.orgPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]
CWE-416Use After FreeCISA-ADP

Affected Products

ProductVersions
linux linux kernel
< 6.1.117
>= 6.2, < 6.6.61
>= 6.7, < 6.11.8
6.12 rc1
6.12 rc2

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-50283
NVD Published Date:
Nov 19, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-50283 Details - Not Deferred