CVE-2024-50047 — Use After Free in Linux

CWE-416 — Use After FreeCWE-825 — Expired Pointer Dereference71 documents8 sources
Severity
7.8HIGHNVD
OSV8.8OSV5.5OSV4.7
EPSS
0.0%
top 95.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
LinuxLinux KernelDebian Linux+7 more
Timeline
PublishedOct 21
Latest updateMar 4

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption (large read) crashes with a slab-use-after-free way down in the crypto API. Reproducer: # mount.cifs -o ...,seal,esize=1 //srv/share /mnt # dd if=/mnt/largefile of=/dev/null ... [ 194.196391] ================================================================== [ 194.196844] BUG: KASAN: slab-use-after-free in gf128mul_4k_lle+0xc1/0x110 [ 194.197269] Read of size …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages11 packages

▶NVDlinux/linux_kernel6.7 — 6.11.4+8
▶Debianlinux/linux_kernel< 5.10.237-1+7
▶Ubuntulinux/linux_kernel< 5.15.0-143.153+7

Also affects: Debian Linux 11.0

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

34
OSV
Kernel Live Patch Security Notice↗2026-03-04
▶
OSV
linux-azure-5.15 vulnerabilities↗2025-09-02
▶
OSV
linux-azure-fips vulnerabilities↗2025-08-22
▶
OSV
linux-raspi vulnerabilities↗2025-08-05
▶
OSV
linux-iot vulnerabilities↗2025-08-04
▶

📋Vendor Advisories

35
Ubuntu
Kernel Live Patch Security Notice↗2026-03-04
▶
Ubuntu
Kernel Live Patch Security Notice↗2025-10-08
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2025-09-02
▶
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2025-08-22
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-08-05
▶
CVE-2024-50047 — Use After Free in Linux | cvebase