CVE-2024-50284

Summary

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: Fix the missing xa_store error check

xa_store() can fail, it return xa_err(-EINVAL) if the entry cannot be stored in an XArray, or xa_err(-ENOMEM) if memory allocation failed, so check error for xa_store() to fix it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux052b41ef2abe274f068e892aee81406f11bd1f3a < d8664ce789bd46290c59a00da6897252f92c237daffected
LinuxLinuxb685757c7b08d5073046fb379be965fd6c06aafc < 726c1568b9145fa13ee248df184b186c382a7ff8affected
LinuxLinuxb685757c7b08d5073046fb379be965fd6c06aafc < c2a232c4f790f4bcd4d218904c56ac7a39a448f5affected
LinuxLinuxb685757c7b08d5073046fb379be965fd6c06aafc < 3abab905b14f4ba756d413f37f1fb02b708eee93affected
LinuxLinux1f485b54d04a920723984062c912174330a05178affected
LinuxLinux6.1.71 < 6.1.117affected
LinuxLinux5.15.145 < 5.16affected
LinuxLinux6.3affected
LinuxLinux0 < 6.3unaffected
LinuxLinux6.1.117 <= 6.1.*unaffected
LinuxLinux6.6.61 <= 6.6.*unaffected
LinuxLinux6.11.8 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References