]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix r_count dec/increment mismatch
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 24 Mar 2025 15:00:24 +0000 (00:00 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 10 Apr 2025 12:37:35 +0000 (14:37 +0200)
commit4790bcb269e5d6d88200a67c54ae6d627332a3be
tree9ac955ac06e7f22622abc909d30436262de4f699
parenta32086cc6444a38d06cb0ccb69dde3d2773e72a7
ksmbd: fix r_count dec/increment mismatch

[ Upstream commit ddb7ea36ba7129c2ed107e2186591128618864e1 ]

r_count is only increased when there is an oplock break wait,
so r_count inc/decrement are not paired. This can cause r_count
to become negative, which can lead to a problem where the ksmbd
thread does not terminate.

Fixes: 3aa660c05924 ("ksmbd: prevent connection release during oplock break notification")
Reported-by: Norbert Szetei <norbert@doyensec.com>
Tested-by: Norbert Szetei <norbert@doyensec.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/smb/server/oplock.c