---
id: CVE-2024-50285
title: 'ksmbd: check outstanding simultaneous SMB operations'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ksmbd: check outstanding simultaneous SMB operations

  If Client send simultaneous SMB operations to ksmbd, It exhausts too much
  memory through the "ksmbd_work_cache”. I…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    d2e2830c19824c221b6f5e17bf272438cc0e601c
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    1f993777275cbd8f74765c4f9d9285cb907c9be5
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    e257ac6fe138623cf59fca8898abdf659dbc8356
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    0a77d947f599b1f39065015bec99390d0c0022ee
  - Linux 5.15
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-10-01T20:14:33.951916Z'
published: '2024-11-19'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:19:51.479Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-50285'
references:
  - url: 'https://git.kernel.org/stable/c/d2e2830c19824c221b6f5e17bf272438cc0e601c'
  - url: 'https://git.kernel.org/stable/c/1f993777275cbd8f74765c4f9d9285cb907c9be5'
  - url: 'https://git.kernel.org/stable/c/e257ac6fe138623cf59fca8898abdf659dbc8356'
  - url: 'https://git.kernel.org/stable/c/0a77d947f599b1f39065015bec99390d0c0022ee'
tags:
  - cve.org
epss: 0.00616
epssPercentile: 0.49787
ingestedAt: '2026-11-03T14:47:02.510Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: check outstanding simultaneous SMB operations

If Client send simultaneous SMB operations to ksmbd, It exhausts too much
memory through the "ksmbd_work_cache”. It will cause OOM issue.
ksmbd has a credit mechanism but it can't handle this problem. This patch
add the check if it exceeds max credits to prevent this problem by assuming
that one smb request consumes at least one credit.

## Affected

- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < d2e2830c19824c221b6f5e17bf272438cc0e601c`
- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 1f993777275cbd8f74765c4f9d9285cb907c9be5`
- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < e257ac6fe138623cf59fca8898abdf659dbc8356`
- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 0a77d947f599b1f39065015bec99390d0c0022ee`
- `Linux 5.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.