CVE-2024-50284

MEDIUM

Linux Kernel 5.15.145-5.15.x - Denial of Service via Missing xa_store Error Check

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix the missing xa_store error check xa_store() can fail, it return xa_err(-EINVAL) if the entry cannot be stored in an XArray, or xa_err(-ENOMEM) if memory allocation failed, so check error for xa_store() to fix it.

References (5)

Core 5

Scores

CVSS v3 5.5
EPSS 0.0023
EPSS Percentile 13.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-754
Status published
Products (15)
Linux/Linux < 6.3
Linux/Linux 052b41ef2abe274f068e892aee81406f11bd1f3a - d8664ce789bd46290c59a00da6897252f92c237d
Linux/Linux 1f485b54d04a920723984062c912174330a05178
Linux/Linux 5.15.145 - 5.16
Linux/Linux 6.1.117 - 6.1.*
Linux/Linux 6.1.71 - 6.1.117
Linux/Linux 6.11.8 - 6.11.*
Linux/Linux 6.12
Linux/Linux 6.3
Linux/Linux 6.6.61 - 6.6.*
... and 5 more
Published Nov 19, 2024
Tracked Since Feb 18, 2026