Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-50285

ksmbd: check outstanding simultaneous SMB operations

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operations If Client send simultaneous SMB operations to ksmbd, It exhausts too much memory through the "ksmbd_work_cache”. It will cause OOM issue. ksmbd has a credit mechanism but it can't handle this problem. This patch add the check if it exceeds max credits to prevent this problem by assuming that one smb request consumes at least one credit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < d2e2830c19824c221b6f5e17bf272438cc0e601caffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 1f993777275cbd8f74765c4f9d9285cb907c9be5affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < e257ac6fe138623cf59fca8898abdf659dbc8356affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 0a77d947f599b1f39065015bec99390d0c0022eeaffected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.61 to ≤ 6.6.*unaffected
  • 6.11.8 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References