CVE-2024-50047

A flaw was found in the Linux kernel's Server Message Block (SMB) client. An authenticated local attacker with administrative or root privileges could trigger a use-after-free vulnerability during asynchronous decryption of large reads. This flaw could lead to a system crash, resulting in a denial of service (DoS).

This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid mounting CIFS shares with the seal and esize=1 options, particularly when interacting with untrusted SMB servers. If these options are necessary, ensure that the SMB share is trusted and properly secured.