CVE-2024-50286 is a use-after-free vulnerability in the Linux kernel's ksmbd component, specifically in the ksmbd_smb2_session_create function. The flaw arises from a race condition between session creation and session expiration, due to missing locking on the global session table. This vulnerability has been fixed by adding the necessary sessions_table_lock to prevent concurrent access issues.