CVE-2024-50283 is a high-severity use-after-free vulnerability in the Linux kernel's ksmbd component, specifically in the smb3_preauth_hash_rsp function. The flaw involves improper handling of user sessions, where ksmbd_user_session_put was not called correctly, potentially leading to a slab-use-after-free condition. This issue has been fixed by ensuring ksmbd_user_session_put is called under smb3_preauth_hash_rsp to prevent premature freeing of sessions.