diff options
| author | Namjae Jeon <linkinjeon@kernel.org> | 2025-03-27 15:22:51 +0300 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2025-04-01 08:04:21 +0300 |
| commit | fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db (patch) | |
| tree | 0c30a908ab1ed26725859df5a3f18493a2691b64 /lib/test_fortify/write_overflow-strncpy.c | |
| parent | f64a72bc767f6e9ddb18fdacaeb99708c4810ada (diff) | |
| download | linux-fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db.tar.xz | |
ksmbd: fix session use-after-free in multichannel connection
There is a race condition between session setup and
ksmbd_sessions_deregister. The session can be freed before the connection
is added to channel list of session.
This patch check reference count of session before freeing it.
Cc: stable@vger.kernel.org
Reported-by: Sean Heelan <seanheelan@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'lib/test_fortify/write_overflow-strncpy.c')
0 files changed, 0 insertions, 0 deletions