projects / linux-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e2ff19f) | patch
ksmbd: fix use-after-free in smb2_lock
authorNamjae Jeon <linkinjeon@kernel.org>
Wed, 26 Feb 2025 06:44:02 +0000 (15:44 +0900)
committerSteve French <stfrench@microsoft.com>
Mon, 3 Mar 2025 04:50:53 +0000 (22:50 -0600)
commit84d2d1641b71dec326e8736a749b7ee76a9599fc
tree7444a92048a0a5b6e4ebc3195db3ecc4b99326d5tree
parente2ff19f0b7a30e03516e6eb73b948e27a55bc9d2commit | diff
ksmbd: fix use-after-free in smb2_lock

If smb_lock->zero_len has value, ->llist of smb_lock is not delete and
flock is old one. It will cause use-after-free on error handling
routine.

Cc: stable@vger.kernel.org
Reported-by: Norbert Szetei <norbert@doyensec.com>
Tested-by: Norbert Szetei <norbert@doyensec.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smb2pdu.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)