diff options
author | Namjae Jeon <linkinjeon@kernel.org> | 2024-08-17 07:03:49 +0200 |
---|---|---|
committer | Steve French <stfrench@microsoft.com> | 2024-08-19 00:02:36 +0200 |
commit | 76e98a158b207771a6c9a0de0a60522a446a3447 (patch) | |
tree | 92b7c2596874cc7f0536d18d2135b0b6b30c6849 /Documentation/filesystems | |
parent | ksmbd: Use unsafe_memcpy() for ntlm_negotiate (diff) | |
download | linux-76e98a158b207771a6c9a0de0a60522a446a3447.tar.xz linux-76e98a158b207771a6c9a0de0a60522a446a3447.zip |
ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
If there is ->PreviousSessionId field in the session setup request,
The session of the previous connection should be destroyed.
During this, if the smb2 operation requests in the previous session are
being processed, a racy issue could happen with ksmbd_destroy_file_table().
This patch sets conn->status to KSMBD_SESS_NEED_RECONNECT to block
incoming operations and waits until on-going operations are complete
(i.e. idle) before desctorying the previous session.
Fixes: c8efcc786146 ("ksmbd: add support for durable handles v1/v2")
Cc: stable@vger.kernel.org # v6.6+
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-25040
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'Documentation/filesystems')
0 files changed, 0 insertions, 0 deletions