diff options
| author | Sean Heelan <seanheelan@gmail.com> | 2025-04-21 18:39:29 +0300 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2025-04-26 02:22:26 +0300 |
| commit | 2fc9feff45d92a92cd5f96487655d5be23fb7e2b (patch) | |
| tree | 11327ea1b1ed45aa5863741dcf3c864c89b48f12 /lib/mpi/mpi-sub-ui.c | |
| parent | e86e9134e1d1c90a960dd57f59ce574d27b9a124 (diff) | |
| download | linux-2fc9feff45d92a92cd5f96487655d5be23fb7e2b.tar.xz | |
ksmbd: fix use-after-free in session logoff
The sess->user object can currently be in use by another thread, for
example if another connection has sent a session setup request to
bind to the session being free'd. The handler for that connection could
be in the smb2_sess_setup function which makes use of sess->user.
Cc: stable@vger.kernel.org
Signed-off-by: Sean Heelan <seanheelan@gmail.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'lib/mpi/mpi-sub-ui.c')
0 files changed, 0 insertions, 0 deletions