]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ksmbd: fix use-after-free in ksmbd_session_rpc_open
authorNamjae Jeon <linkinjeon@kernel.org>
Thu, 17 Apr 2025 01:10:15 +0000 (10:10 +0900)
committerSteve French <stfrench@microsoft.com>
Wed, 23 Apr 2025 01:45:43 +0000 (20:45 -0500)
commita1f46c99d9ea411f9bf30025b912d881d36fc709
tree7d816024d2fc814e3ea4a482d3d1dc64d3b5016e
parentaf5226abb40cae959f424f7ca614787a1c87ce48
ksmbd: fix use-after-free in ksmbd_session_rpc_open

A UAF issue can occur due to a race condition between
ksmbd_session_rpc_open() and __session_rpc_close().
Add rpc_lock to the session to protect it.

Cc: stable@vger.kernel.org
Reported-by: Norbert Szetei <norbert@doyensec.com>
Tested-by: Norbert Szetei <norbert@doyensec.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/mgmt/user_session.c
fs/smb/server/mgmt/user_session.h