diff options
| author |   Namjae Jeon <linkinjeon@kernel.org> | 2023-05-19 23:09:48 +0900 |
|---|---|---|
| committer |   Steve French <stfrench@microsoft.com> | 2023-05-26 20:27:46 -0500 |
| commit | 36322523dddb11107e9f7f528675a0dec2536103 (patch) | |
| tree | 5cbdf837cda3e64fde146a6712f106d9bfe5939a /scripts/generate_rust_analyzer.py | |
| parent | ksmbd: fix multiple out-of-bounds read during context decoding (diff) | |
| download | wireguard-linux-36322523dddb11107e9f7f528675a0dec2536103.tar.xz wireguard-linux-36322523dddb11107e9f7f528675a0dec2536103.zip | |
ksmbd: fix UAF issue from opinfo->conn
If opinfo->conn is another connection and while ksmbd send oplock break
request to cient on current connection, The connection for opinfo->conn
can be disconnect and conn could be freed. When sending oplock break
request, this ksmbd_conn can be used and cause user-after-free issue.
When getting opinfo from the list, ksmbd check connection is being
released. If it is not released, Increase ->r_count to wait that connection
is freed.
Cc: stable@vger.kernel.org
Reported-by: Per Forlin <per.forlin@axis.com>
Tested-by: Per Forlin <per.forlin@axis.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions