CVE-2024-50120

MEDIUM

Linux Kernel 6.6.24-6.6.59 - Denial of Service via SMB Password Allocation Failure

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Handle kstrdup failures for passwords In smb3_reconfigure(), after duplicating ctx->password and ctx->password2 with kstrdup(), we need to check for allocation failures. If ses->password allocation fails, return -ENOMEM. If ses->password2 allocation fails, free ses->password, set it to NULL, and return -ENOMEM.

References (3)

Core 3

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 11.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (17)
linux/Kernel < 6.6.59linux
linux/Kernel 6.7.0 - 6.11.6linux
Linux/Linux < 6.9
Linux/Linux 2a0fc63f1f4fccfeb367d0c57b8a243cec60c26c
Linux/Linux 6.11.6 - 6.11.*
Linux/Linux 6.12
Linux/Linux 6.6.24 - 6.6.59
Linux/Linux 6.6.59 - 6.6.*
Linux/Linux 6.7.12 - 6.8
Linux/Linux 6.8.3 - 6.9
... and 7 more
Published Nov 05, 2024
Tracked Since Feb 18, 2026