]> www.infradead.org Git - users/dwmw2/linux.git/commit
ksmbd: fix racy issue under cocurrent smb2 tree disconnect
authorNamjae Jeon <linkinjeon@kernel.org>
Tue, 2 May 2023 23:51:12 +0000 (08:51 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 11 May 2023 14:03:03 +0000 (23:03 +0900)
commitbd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6
tree18a18c67d5e6482bb2d0c90cd5299cc880c749ae
parentcec378687a5a419fff53a6407a6a8ac0b5a2f518
ksmbd: fix racy issue under cocurrent smb2 tree disconnect

commit 30210947a343b6b3ca13adc9bfc88e1543e16dd5 upstream.

There is UAF issue under cocurrent smb2 tree disconnect.
This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent
access.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-20592
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/mgmt/tree_connect.c
fs/ksmbd/mgmt/tree_connect.h
fs/ksmbd/smb2pdu.c