Namjae Jeon 38d20c6290 ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ...

The race is between the handling of a new TCP connection and
its disconnection. It leads to UAF on `struct tcp_transport` in
ksmbd_tcp_new_connection() function.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-22991
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>

2024-01-14 11:39:49 -06:00

9.9 KiB

Raw Blame History

View Raw