projects / thirdparty / kernel / stable-queue.git / blame
| Commit | Line | Data |
|---|---|---|
| 98979065 GKH |
1 | From 0865ffefea197b437ba78b5dd8d8e256253efd65 Mon Sep 17 00:00:00 2001 |
| 2 | From: Paulo Alcantara <pc@manguebit.com> | |
| 3 | Date: Tue, 2 Apr 2024 16:33:56 -0300 | |
| 4 | Subject: smb: client: fix potential UAF in cifs_stats_proc_show() | |
| 5 | ||
| 6 | From: Paulo Alcantara <pc@manguebit.com> | |
| 7 | ||
| 8 | commit 0865ffefea197b437ba78b5dd8d8e256253efd65 upstream. | |
| 9 | ||
| 10 | Skip sessions that are being teared down (status == SES_EXITING) to | |
| 11 | avoid UAF. | |
| 12 | ||
| 13 | Cc: stable@vger.kernel.org | |
| 14 | Signed-off-by: Paulo Alcantara (Red Hat) <pc@manguebit.com> | |
| 15 | Signed-off-by: Steve French <stfrench@microsoft.com> | |
| 16 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
| 17 | --- | |
| 18 | fs/smb/client/cifs_debug.c | 2 ++ | |
| 19 | 1 file changed, 2 insertions(+) | |
| 20 | ||
| 21 | --- a/fs/smb/client/cifs_debug.c | |
| 22 | +++ b/fs/smb/client/cifs_debug.c | |
| 23 | @@ -736,6 +736,8 @@ static int cifs_stats_proc_show(struct s | |
| 24 | } | |
| 25 | #endif /* STATS2 */ | |
| 26 | list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) { | |
| 27 | + if (cifs_ses_exiting(ses)) | |
| 28 | + continue; | |
| 29 | list_for_each_entry(tcon, &ses->tcon_list, tcon_list) { | |
| 30 | i++; | |
| 31 | seq_printf(m, "\n%d) %s", i, tcon->tree_name); |