]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix out of bounds read in smb2_sess_setup
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 18 Dec 2023 15:34:10 +0000 (00:34 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 23 Dec 2023 09:41:57 +0000 (10:41 +0100)
commit676392184785ace61e939831e7ca44a03d438c3b
tree93c88f9329c9f1912ff1cbbe5d8e15f30ef77ee4
parentd91ba80185e4a0eea471d794638c1b2935fd90f4
ksmbd: fix out of bounds read in smb2_sess_setup

[ Upstream commit 98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8 ]

ksmbd does not consider the case of that smb2 session setup is
in compound request. If this is the second payload of the compound,
OOB read issue occurs while processing the first payload in
the smb2_sess_setup().

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-21355
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/smb2pdu.c