Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-50152

smb: client: fix possible double free in smb2_set_ea()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix possible double free in smb2_set_ea() Clang static checker(scan-build) warning： fs/smb/client/smb2ops.c:1304:2: Attempt to free released memory. 1304 | kfree(ea); | ^~~~~~~~~ There is a double free in such case: 'ea is initialized to NULL' -> 'first successful memory allocation for ea' -> 'something failed, goto sea_exit' -> 'first memory release for ea' -> 'goto replay_again' -> 'second goto sea_exit before allocate memory for ea' -> 'second memory release for ea resulted in double free'. Re-initialie 'ea' to NULL near to the replay_again label, it can fix this double free problem.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 433042a91f9373241307725b52de573933ffedbf to < b1813c220b76f60b1727984794377c4aa849d4c1affected
  • 4f1fffa2376922f3d1d506e49c0fd445b023a28e to < c9f758ecf2562dfdd4adf12c22921b5de8366123affected
  • 4f1fffa2376922f3d1d506e49c0fd445b023a28e to < 19ebc1e6cab334a8193398d4152deb76019b5d34affected
  • 6.6.32 to < 6.6.59affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.6.59 to ≤ 6.6.*unaffected
  • 6.11.6 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References