Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0048 39.6 —
AFFECTED Product Versions Fixed Linux 433042a91f9373241307725b52de573933ffedbf – — Linux 6.8 – 6.6.59
TIMELINE Oct 21 Reserved by Linux Nov 7 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-50152 (Linux). CVSS 9.8 → 5.5 (NVD).
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix possible double free in smb2_set_ea() Clang static checker(scan-build) warning： fs/smb/client/smb2ops.c:1304:2: Attempt to free released memory. 1304 | kfree(ea); | ^~~~~~~~~ There is a double free in such case: 'ea is initialized to NULL' -> 'first successful memory allocation for ea' -> 'something failed, goto sea_exit' -> 'first memory release for ea' -> 'goto replay_again' -> 'second goto sea_exit before allocate memory for ea' -> 'second memory release for ea resulted in double free'. Re-initialie 'ea' to NULL near to the replay_again label, it can fix this double free problem.
| Date | Event | Detail |
|---|---|---|
| October 21, 2024 | Reserved | Reserved by Linux |
| November 7, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-50152 (Linux). CVSS 9.8 → 5.5 (NVD). |
Authoritative record: CVE-2024-50152 at cve.org
Vendors: linux
Weaknesses: CWE-415
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-50152 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.