]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ksmbd: fix session use-after-free in multichannel connection
authorNamjae Jeon <linkinjeon@kernel.org>
Thu, 27 Mar 2025 12:22:51 +0000 (21:22 +0900)
committerSteve French <stfrench@microsoft.com>
Tue, 1 Apr 2025 05:04:21 +0000 (00:04 -0500)
commitfa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db
tree0c30a908ab1ed26725859df5a3f18493a2691b64
parentf64a72bc767f6e9ddb18fdacaeb99708c4810ada
ksmbd: fix session use-after-free in multichannel connection

There is a race condition between session setup and
ksmbd_sessions_deregister. The session can be freed before the connection
is added to channel list of session.
This patch check reference count of session before freeing it.

Cc: stable@vger.kernel.org
Reported-by: Sean Heelan <seanheelan@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/auth.c
fs/smb/server/mgmt/user_session.c
fs/smb/server/smb2pdu.c