Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-50120

smb: client: Handle kstrdup failures for passwords

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Handle kstrdup failures for passwords In smb3_reconfigure(), after duplicating ctx->password and ctx->password2 with kstrdup(), we need to check for allocation failures. If ses->password allocation fails, return -ENOMEM. If ses->password2 allocation fails, free ses->password, set it to NULL, and return -ENOMEM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7e8cffa4f85e6839335d75e6b47f918d90c1d194 to < 35dbac8c328d6afe937cd45ecd41d209d0b9f8b8affected
  • c1eb537bf4560b3ad4df606c266c665624f3b502 to < 35488799b0ab6e4327f82e1d9209a60805665b37affected
  • c1eb537bf4560b3ad4df606c266c665624f3b502 to < 9a5dd61151399ad5a5d69aad28ab164734c1e3bcaffected
  • e78308a6dcab1e53b38b8dd952e69c515cd324d7affected
  • 2a0fc63f1f4fccfeb367d0c57b8a243cec60c26caffected
  • 6.6.24 to < 6.6.59affected
  • 6.7.12 to < 6.8affected
  • 6.8.3 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.6.59 to ≤ 6.6.*unaffected
  • 6.11.6 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References