CVE-2024-50283: linux Use After Free
CVSS: 9.8v3.1CriticalModified
AliasesUBUNTU-CVE-2024-50283DEBIAN-CVE-2024-50283
Published 19-11-2024Last modified 05-08-2026
Vulnerability summary
CVE-2024-50283 is a critical (CVSS 9.8) Use After Free vulnerability in linux. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 48.9% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
0.62%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 23 · Related 23Timeline
- 19-11-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_session_put should be called under smb3_preauth_hash_rsp(). It will avoid freeing session before calling smb3_preauth_hash_rsp().
CVSS metrics
4 scores · 4 sources · 1 versionCritical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.8–9.8
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
0.00 pp
From 0.62% on 19-09-2026
19-09-202619-10-2026
EPSS score0.62%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu135 products
- linuxAll versions (No fix recorded) | < 5.15.0-135.146 | < 6.8.0-58.60
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1080.87 | < 6.8.0-1027.29
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < cb645064e0811053c94e86677f2e58ed29359d62 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < f7557bbca40d4ca8bb1c6c940ac6c95078bd0827 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < c6cdc08c25a868a08068dfc319fa9fce982b8e7f | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 1b6ad475d4ed577d34e0157eb507be00c588bf5c | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < b8fc56fbca7482c1e5c0e3351c6ae78982e25ada | 5.15
- linux_kernel< 6.1.117 | ≥ 6.2, < 6.6.61 | ≥ 6.7, < 6.11.8 | 6.12:rc1 | 6.12:rc2 | 6.12:rc3 | 6.12:rc4 | 6.12:rc5 | 6.12:rc6
Debian1 product
- linux< 6.1.119-1 | < 6.11.9-1
3 vendors · 138 products
