diff options
| author |   Namjae Jeon <linkinjeon@kernel.org> | 2025-03-27 21:22:51 +0900 |
|---|---|---|
| committer |   Steve French <stfrench@microsoft.com> | 2025-04-01 00:04:21 -0500 |
| commit | fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db (patch) | |
| tree | 0c30a908ab1ed26725859df5a3f18493a2691b64 /net/lapb/lapb_timer.c | |
| parent | Merge tag 'v6.15rc-part1-ksmbd-server-fixes' of git://git.samba.org/ksmbd (diff) | |
| download | wireguard-linux-fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db.tar.xz wireguard-linux-fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db.zip | |
ksmbd: fix session use-after-free in multichannel connection
There is a race condition between session setup and
ksmbd_sessions_deregister. The session can be freed before the connection
is added to channel list of session.
This patch check reference count of session before freeing it.
Cc: stable@vger.kernel.org
Reported-by: Sean Heelan <seanheelan@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions