]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix racy issue from session setup and logoff
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 18 Dec 2023 15:33:48 +0000 (00:33 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 23 Dec 2023 09:41:55 +0000 (10:41 +0100)
commit708c304b583d789957399dd8237f212cf8ad1e4d
tree2b09be2163bf4de16e7550f4a6f5ddab0f2cd0d7
parent019aae488dbc67c97a33db03652e20e2c9e3afa7
ksmbd: fix racy issue from session setup and logoff

[ Upstream commit f5c779b7ddbda30866cf2a27c63e34158f858c73 ]

This racy issue is triggered by sending concurrent session setup and
logoff requests. This patch does not set connection status as
KSMBD_SESS_GOOD if state is KSMBD_SESS_NEED_RECONNECT in session setup.
And relookup session to validate if session is deleted in logoff.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-20481, ZDI-CAN-20590, ZDI-CAN-20596
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/connection.c
fs/ksmbd/connection.h
fs/ksmbd/mgmt/user_session.c
fs/ksmbd/server.c
fs/ksmbd/smb2pdu.c
fs/ksmbd/transport_tcp.c