PT-2024-10020 · Linux+5 · Linux Kernel+5

Norbert Szetei · Published 2024-11-05 · Updated 2026-05-26 · CVE-2024-50286

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The Linux kernel's ksmbd server is affected by a slab-use-after-free issue in the ksmbd smb2 session create function, caused by a race condition between ksmbd smb2 session create and ksmbd expire session. This issue can be exploited to impact the confidentiality, integrity, and availability of protected information. Although the vulnerable versions are not explicitly stated, a patch has been released to resolve the issue by adding a missing sessions table lock when adding or deleting sessions from the global session table. An exploit for this issue could potentially allow an attacker to compromise the security of the system. #LinuxKernel #ksmbd #SlabUseAfterFree #RaceCondition #Exploit #LinuxSecurity

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-16040

ALT-PU-2024-17211

ALT-PU-2024-17891

ALT-PU-2025-12647

BDU:2025-00148

CVE-2024-50286

DLA-4008-1

DSA-5818-1

OESA-2024-2522

USN-7276-1

USN-7277-1

USN-7310-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 1170

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50286.json · Exploit
• https://ubuntu.com/security/CVE-2024-53044 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56627 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49963 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53177 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56647 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49914 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50171 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53191 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47712 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56615 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41014 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49855 · Vendor Advisory