CVE-2024-50286

🗓️ 19 Nov 2024 01:30:29Reported by LinuxType

In Linux kernel, a race condition vulnerability has been fixed in ksmbd_smb2_session_creat

Reporter	Title	Published	Views	Family All 73
AstraLinux	Astra Linux - уязвимость в linux-6.1	3 May 202623:59	–	astralinux
Circl	CVE-2024-50286	19 Nov 202402:54	–	circl
CNNVD	Linux kernel 安全漏洞	19 Nov 202400:00	–	cnnvd
CNVD	Unspecified vulnerability in Linux kernel (CNVD-2024-46393)	21 Nov 202400:00	–	cnvd
Cvelist	CVE-2024-50286 ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create	19 Nov 202401:30	–	cvelist
Debian	[SECURITY] [DLA 4008-1] linux-6.1 security update	3 Jan 202500:41	–	debian
Debian	[SECURITY] [DSA 5818-1] linux security update	24 Nov 202416:09	–	debian
Debian CVE	CVE-2024-50286	19 Nov 202401:30	–	debiancve
Tenable Nessus	Debian dla-4008 : linux-config-6.1 - security update	3 Jan 202500:00	–	nessus
Tenable Nessus	Debian dsa-5818 : affs-modules-6.1.0-21-4kc-malta-di - security update	24 Nov 202400:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange<6.1.117

linux linux_kernelRange6.2–6.6.61

linux linux_kernelRange6.7–6.11.8

linux linux_kernelMatch6.12rc1

linux linux_kernelMatch6.12rc2

linux linux_kernelMatch6.12rc3

linux linux_kernelMatch6.12rc4

linux linux_kernelMatch6.12rc5

linux linux_kernelMatch6.12rc6

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/smb/server/mgmt/user_session.c"
    ],
    "versions": [
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "f56446ba5378d19e31040b548a14ee9a8f1500ea",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "e923503a56b3385b64ae492e3225e4623f560c5b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "e7a2ad2044377853cf8c59528dac808a08a99c72",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "0a77715db22611df50b178374c51e2ba0d58866e",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/smb/server/mgmt/user_session.c"
    ],
    "versions": [
      {
        "version": "5.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.15",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.117",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.61",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.11.8",
        "lessThanOrEqual": "6.11.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/e923503a56b3385b64ae492e3225e4623f560c5b
git	www.git.kernel.org/stable/c/0a77715db22611df50b178374c51e2ba0d58866e
git	www.git.kernel.org/stable/c/e7a2ad2044377853cf8c59528dac808a08a99c72
git	www.git.kernel.org/stable/c/f56446ba5378d19e31040b548a14ee9a8f1500ea
lists	www.lists.debian.org/debian-lts-announce/2025/01/msg00001.html

11 May 2026 20:49Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17 - 7.8

EPSS0.0002

SSVC

CWE-416