PT-2024-33827 · Linux+4 · Linux Kernel+4

Published

2024-09-03

·

Updated

2026-05-26

·

CVE-2024-49988

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58
Description: The issue is related to the ksmbd component in the Linux kernel. When sending an oplock break request, opinfo->conn is used, but a freed ->conn can be used on multichannel, leading to potential issues. A patch has been added to include a reference count to the ksmbd conn struct, ensuring it can be freed when no longer used.
Recommendations: For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ksmbd component until a patch is available.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-14046
AZL-51771
BDU:2025-16135
CVE-2024-49988
ECHO-A080-CD3C-94EA
MGASA-2024-0344
MGASA-2024-0345
OESA-2025-1097
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7301-1
USN-7303-1
USN-7303-2
USN-7303-3
USN-7304-1
USN-7310-1
USN-7311-1
USN-7384-1
USN-7384-2
USN-7385-1
USN-7386-1
USN-7403-1
USN-7468-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Ubuntu