VDB

CISA-2024-50284

CISA-2024-50284 PUBLISHED CVSS 5.5 MEDIUM

Reported by Linux · Published November 19, 2024

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix the missing xa_store error check xa_store() can fail, it return xa_err(-EINVAL) if the entry cannot be stored in an XArray, or xa_err(-ENOMEM) if memory allocation failed, so check error for xa_store() to fix it.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
LinuxLinux052b41ef2abe274f068e892aee81406f11bd1f3a, b685757c7b08d5073046fb379be965fd6c06aafc, b685757c7b08d5073046fb379be965fd6c06aafc
LinuxLinux6.3, 0, 6.1.117
linuxlinux_kernel6.1.71, 6.3, 5.15.145
LinuxLinux052b41ef2abe274f068e892aee81406f11bd1f3a, b685757c7b08d5073046fb379be965fd6c06aafc, b685757c7b08d5073046fb379be965fd6c06aafc

Timeline

  • Nov 19, 2024 CVE Published
  • Oct 1, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›