Memory Exhaustion Vulnerability in Linux Kernel's ksmbd Package
Summary
DEBIAN-CVE-2024-50285: In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operations If Client send simultaneous SMB operations to ksmbd, It exhausts too much memory through the "ksmbd... Affects linux versions < 6.11.9-1. Fixed in 6.11.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It provides essential services for all other parts of the system, including process management, memory management, and device control. The ksmbd package is a server message block (SMB) server implementation in the Linux kernel that allows file sharing and printing services over a network. This package is crucial for enabling interoperability between Linux and Windows systems. However, it is susceptible to vulnerabilities that can lead to significant system issues, such as memory exhaustion.
Vulnerability Detail
The vulnerability identified as DEBIAN-CVE-2024-50285 arises from the ksmbd component of the Linux kernel. It occurs when a client sends simultaneous SMB operations to ksmbd, leading to excessive memory consumption through the 'ksmbd_work_cache'. This situation can result in an Out of Memory (OOM) condition, causing the system to become unresponsive or crash. The existing credit mechanism in ksmbd is insufficient to manage this issue, prompting the need for a patch that introduces a check to prevent exceeding maximum credits, thereby mitigating the risk of memory exhaustion.
How To Fix
Minimum fixed version
6.11.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to monitor their systems for unusual memory usage patterns and limit the number of simultaneous SMB operations if possible.
Conclusion
The DEBIAN-CVE-2024-50285 vulnerability in the ksmbd component of the Linux kernel poses a significant risk of memory exhaustion due to simultaneous SMB operations. Users are encouraged to update their Linux packages to the patched version 6.11.9-1 to mitigate this risk. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications.
See every vulnerability recorded for linux →
FAQ
It is a vulnerability in the ksmbd component of the Linux kernel that can lead to memory exhaustion when multiple SMB operations are executed simultaneously.
This vulnerability can cause your system to run out of memory, leading to crashes or unresponsiveness, particularly under heavy SMB load.
Yes, the vulnerability has been patched in version 6.11.9-1 of the Linux package for both Debian 13 and Debian 14.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
While there are no specific workarounds, it is advisable to limit simultaneous SMB operations and monitor memory usage until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
