CVE-2024-50086 ksmbd: fix user-after-free from session log off
A race condition in the Linux kernel ksmbd module allows a use-after-free during session logoff, potentially enabling code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50086?
CVE-2024-50086 is a critical use after free vulnerability in Linux kernel, published on 29 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix user-after-free from session log off
There is racy issue between smb2 session log off and smb2 session setup. It will cause user-after-free from session log off. This add session_lock when setting SMB2_SESSION_EXPIRED and referece count to session struct not to free session while it is being used.
Weakness: CWE-416
Which versions are affected by CVE-2024-50086?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50086?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2024-50086 being exploited?
There is no known exploitation of CVE-2024-50086 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-50086, DEBIAN-CVE-2024-50086, GHSA-r5jh-qcvm-667j, UBUNTU-CVE-2024-50086.