]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: fix memleak in session setup
authorNamjae Jeon <linkinjeon@kernel.org>
Tue, 2 May 2023 23:26:45 +0000 (08:26 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 11 May 2023 14:10:53 +0000 (23:10 +0900)
commitf046da6428d486b1bb9c1c1e13859852bc928cb6
treec8c562e0d8e8f6b537efeb8e6661118b4f243e93
parentb35f6c031b87d9e51f141ff6de0ea59756a8e313
ksmbd: fix memleak in session setup

commit 6d7cb549c2ca20e1f07593f15e936fd54b763028 upstream.

If client send session setup request with unknown NTLMSSP message type,
session that does not included channel can be created. It will cause
session memleak. because ksmbd_sessions_deregister() does not destroy
session if channel is not included. This patch return error response if
client send the request unknown NTLMSSP message type.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-20593
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/smb2pdu.c