CVE-2024-50284

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: Fix the missing xa_store error check

xa_store() can fail, it return xa_err(-EINVAL) if the entry cannot be stored in an XArray, or xa_err(-ENOMEM) if memory allocation failed, so check error for xa_store() to fix it.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-754

Affected software

VendorProductVersions
LinuxLinux>= 052b41ef2abe274f068e892aee81406f11bd1f3a, < d8664ce789bd46290c59a00da6897252f92c237d; >= b685757c7b08d5073046fb379be965fd6c06aafc, < 726c1568b9145fa13ee248df184b186c382a7ff8; >= b685757c7b08d5073046fb379be965fd6c06aafc, < c2a232c4f790f4bcd4d218904c56ac7a39a448f5; >= b685757c7b08d5073046fb379be965fd6c06aafc, < 3abab905b14f4ba756d413f37f1fb02b708eee93; 1f485b54d04a920723984062c912174330a05178; >= 6.1.71, < 6.1.117; >= 5.15.145, < 5.16
LinuxLinux6.3

References

Timeline

Published
Nov 19, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-502855.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operations If Client send siCVE-2024-502867.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is aCVE-2024-502875.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: prevent the risk of a division by zero As reported byCVE-2024-502885.5In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using > 32 buffers The maximumCVE-2024-502895.5In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warned by smatch: driveCVE-2024-50294.8The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as CVE-2024-502905.5In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by CoverCVE-2024-502915.5In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: add missing buffer index check dvb_vb2_expbuf() didn'CVE-2024-502925.5In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove CVE-2024-502937.8In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in __smc_create() Thanks tCVE-2024-502944.7In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborteCVE-2024-502955.5In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unmap_single The ndev-
CVE-2024-50284: Medium severity, CVSS 5.5 | Vulnix