Review reviewHigh

CVE-2024-50283

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_session_put should be called under smb3_preauth_hash_rsp(). It will avoid freeing session before calling smb3_preauth_hash_rsp().

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2024.11.19

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 0626e6641f6b467447c81dd7678a69c66f7746cf < cb645064e0811053c94e86677f2e58ed29359d62, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < f7557bbca40d4ca8bb1c6c940ac6c95078bd0827, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < c6cdc08c25a868a08068dfc319fa9fce982b8e7f, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 1b6ad475d4ed577d34e0157eb507be00c588bf5c, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < b8fc56fbca7482c1e5c0e3351c6ae78982e25ada, >= 5.15, < 6.1.117, >= 6.2 < 6.6.61, >= 6.7 < 6.11.8, 6.12
Fixed versions: 6.1.117, 6.6.61, 6.11.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416