CVE ID : CVE-2024-50283

Published : Nov. 19, 2024, 2:16 a.m. | 59 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp

ksmbd_user_session_put should be called under smb3_preauth_hash_rsp().
It will avoid freeing session before calling smb3_preauth_hash_rsp().

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…