]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix Preauh_HashValue race condition
authorNamjae Jeon <linkinjeon@kernel.org>
Thu, 24 Jul 2025 23:13:31 +0000 (08:13 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 15 Aug 2025 10:09:06 +0000 (12:09 +0200)
commitb69fd87076daa66f3d186bd421a7b0ee0cb45829
tree377529aea9e14cee27be6e2f5b3192077201e226
parentd79c8bebaa622ee223128be7c66d8aaeeb634a57
ksmbd: fix Preauh_HashValue race condition

commit 44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6 upstream.

If client send multiple session setup requests to ksmbd,
Preauh_HashValue race condition could happen.
There is no need to free sess->Preauh_HashValue at session setup phase.
It can be freed together with session at connection termination phase.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-27661
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/smb/server/smb2pdu.c