[lvc-project] [PATCH 5.10/5.15 0/2] smb: client: fix UAF in async decryption

Anastasia Belova abelova at astralinux.ru
Tue Feb 25 12:34:22 MSK 2025


Commit b0abcd65ec54 ("smb: client: fix UAF in async decryption")
fixes CVE-2024-50047 but brings NULL-pointer dereferebce. So
commit 4bdec0d1f658 ("smb: client: fix NULL ptr deref in crypto_aead_setkey()")
should be backported too.



More information about the lvc-project mailing list