Security Advisory

CVE-2024-50086

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-29 00:50:29

Last updated 2026-05-11 20:45:10

Assigner Linux

CVSS score not scored

State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off There is racy issue between smb2 session log off and smb2 session setup. It will cause user-after-free from session log off. This add session_lock when setting SMB2_SESSION_EXPIRED and referece count to session struct not to free session while it is being used.

← Browse all CVEs View on cve.org ↗