diff options
| author |   Namjae Jeon <linkinjeon@kernel.org> | 2025-11-18 09:05:46 +0900 |
|---|---|---|
| committer |   Steve French <stfrench@microsoft.com> | 2025-11-30 21:11:45 -0600 |
| commit | b39a1833cc4a2755b02603eec3a71a85e9dff926 (patch) | |
| tree | 2018a961cddf11070732e0dbd5117e89a9c3f271 /tools/lib/python | |
| parent | ksmbd: server: avoid busy polling in accept loop (diff) | |
ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
Under high concurrency, A tree-connection object (tcon) is freed on
a disconnect path while another path still holds a reference and later
executes *_put()/write on it.
Reported-by: Qianchang Zhao <pioooooooooip@gmail.com>
Reported-by: Zhitong Liu <liuzhitong1993@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'tools/lib/python')
0 files changed, 0 insertions, 0 deletions