]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix use-after-free in smb_break_all_levII_oplock()
authorNamjae Jeon <linkinjeon@kernel.org>
Tue, 15 Apr 2025 00:30:21 +0000 (09:30 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 25 Apr 2025 08:45:49 +0000 (10:45 +0200)
commit296cb5457cc6f4a754c4ae29855f8a253d52bcc6
treee04269998ced99b1132dbe8e940958538443d764
parent1db2451de23e98bc864c6a6e52aa0d82c91cb325
ksmbd: fix use-after-free in smb_break_all_levII_oplock()

commit 18b4fac5ef17f77fed9417d22210ceafd6525fc7 upstream.

There is a room in smb_break_all_levII_oplock that can cause racy issues
when unlocking in the middle of the loop. This patch use read lock
to protect whole loop.

Cc: stable@vger.kernel.org
Reported-by: Norbert Szetei <norbert@doyensec.com>
Tested-by: Norbert Szetei <norbert@doyensec.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/smb/server/oplock.c
fs/smb/server/oplock.h