ksmbd: fix null pointer dereference error in generate_encryptionkey
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 21 Jul 2025 05:28:55 +0000 (14:28 +0900)
committerSteve French <stfrench@microsoft.com>
Fri, 25 Jul 2025 03:55:29 +0000 (22:55 -0500)
commit9b493ab6f35178afd8d619800df9071992f715de
treea98a202744827ffae53145d18bfaf13556b0cfce
parent4e45cca31d4e70019a5e0fe15208de72f6a55a5e
ksmbd: fix null pointer dereference error in generate_encryptionkey

If client send two session setups with krb5 authenticate to ksmbd,
null pointer dereference error in generate_encryptionkey could happen.
sess->Preauth_HashValue is set to NULL if session is valid.
So this patch skip generate encryption key if session is valid.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-27654
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/server/smb2pdu.c