Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — ksmbd: check outstanding simultaneous SMB operations
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0060 45.9 —
AFFECTED
Product Versions Fixed
Linux 0626e6641f6b467447c81dd7678a69c66f7746cf – —
Linux 5.15 – 6.6.61
TIMELINE
Oct 21 Reserved by Linux
Nov 19 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-50285 (Linux). CVSS 7.5 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: check outstanding simultaneous SMB operations
If Client send simultaneous SMB operations to ksmbd, It exhausts too much
memory through the "ksmbd_work_cache”. It will cause OOM issue.
ksmbd has a credit mechanism but it can't handle this problem. This patch
add the check if it exceeds max credits to prevent this problem by assuming
that one smb request consumes at least one credit.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| October 21, 2024 | Reserved | Reserved by Linux |
| November 19, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-50285 (Linux). CVSS 7.5 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 0626e6641f6b467447c81dd7678a69c66f7746cf | — |
| Linux | Linux | — | 5.15 | 6.6.61 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-50285 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.