Wind River Support Network

HomeDefectsLIN1023-9303
Fixed

LIN1023-9303 : Security Advisory - linux - CVE-2024-50285

Created: Nov 18, 2024    Updated: Oct 22, 2025
Resolved Date: Oct 19, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.19
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operations If Client send simultaneous SMB operations to ksmbd, It exhausts too much memory through the "ksmbd_work_cache”. It will cause OOM issue. ksmbd has a credit mechanism but it can't handle this problem. This patch add the check if it exceeds max credits to prevent this problem by assuming that one smb request consumes at least one credit.

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube