]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix null pointer dereference error in generate_encryptionkey
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 21 Jul 2025 05:28:55 +0000 (14:28 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 15 Aug 2025 10:05:12 +0000 (12:05 +0200)
commit96a82e19434a2522525baab59c33332658bc7653
tree896a6c7f708a7ded26597fca1a224934858d1eff
parentf138be5d7f301fddad4e65ec66dfc3ceebf79be3
ksmbd: fix null pointer dereference error in generate_encryptionkey

commit 9b493ab6f35178afd8d619800df9071992f715de upstream.

If client send two session setups with krb5 authenticate to ksmbd,
null pointer dereference error in generate_encryptionkey could happen.
sess->Preauth_HashValue is set to NULL if session is valid.
So this patch skip generate encryption key if session is valid.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-27654
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/smb/server/smb2pdu.c