QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-50120

Back to search

CVE-2024-50120

Published: Nov 5, 2024

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Handle kstrdup failures for passwords In smb3_reconfigure(), after duplicating ctx->password and ctx->password2 with kstrdup(), we need to check for allocation failures. If ses->password allocation fails, return -ENOMEM. If ses->password2 allocation fails, free ses->password, set it to NULL, and return -ENOMEM.

VendorProductVersions

Linux

Linux

affected
7e8cffa4f85e6839335d75e6b47f918d90c1d194 - < 35dbac8c328d6afe937cd45ecd41d209d0b9f8b8
affected
c1eb537bf4560b3ad4df606c266c665624f3b502 - < 35488799b0ab6e4327f82e1d9209a60805665b37
affected
c1eb537bf4560b3ad4df606c266c665624f3b502 - < 9a5dd61151399ad5a5d69aad28ab164734c1e3bc
affected
e78308a6dcab1e53b38b8dd952e69c515cd324d7
affected
2a0fc63f1f4fccfeb367d0c57b8a243cec60c26c

+3 more versions

Linux

Linux

affected
6.9
unaffected
0 - < 6.9
unaffected
6.6.59 - <= 6.6.*
unaffected
6.11.6 - <= 6.11.*
unaffected
6.12 - <= *

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now