Bug 2327172 (CVE-2024-50285) - CVE-2024-50285 kernel: ksmbd: check outstanding simultaneous SMB operations
Summary: CVE-2024-50285 kernel: ksmbd: check outstanding simultaneous SMB operations
Keywords:
Status: NEW
Alias: CVE-2024-50285
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2327247
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-19 02:01 UTC by OSIDB Bzimport
Modified: 2024-11-21 19:02 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-19 02:01:37 UTC
In the Linux kernel, the following vulnerability has been resolved:

ksmbd: check outstanding simultaneous SMB operations

If Client send simultaneous SMB operations to ksmbd, It exhausts too much
memory through the "ksmbd_work_cache”. It will cause OOM issue.
ksmbd has a credit mechanism but it can't handle this problem. This patch
add the check if it exceeds max credits to prevent this problem by assuming
that one smb request consumes at least one credit.

Comment 1 Avinash Hanwate 2024-11-19 05:56:22 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024111946-CVE-2024-50285-6013@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.