Description
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL. Fix this by check if 'lease_ctx_info' is NULL. Additionally, remove the redundant parentheses in parse_durable_handle_context().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < 878f32878351104448b86ef5b85d1f8ed6f599fbaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < ec28c35029b7930f31117f9284874b63bea4f31baffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 07f384c5be1f8633b13f0a22616e227570450bc6affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 3b692794b81f2ecad69a4adbba687f3836824adaaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 4e8771a3666c8f216eefd6bd2fd50121c6c437dbaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected5.15.181 to ≤ 5.15.*unaffected6.1.135 to ≤ 6.1.*unaffected6.6.51 to ≤ 6.6.*unaffected6.10.10 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/878f32878351104448b86ef5b85d1f8ed6f599fb ↗
- https://git.kernel.org/stable/c/ec28c35029b7930f31117f9284874b63bea4f31b ↗
- https://git.kernel.org/stable/c/07f384c5be1f8633b13f0a22616e227570450bc6 ↗
- https://git.kernel.org/stable/c/3b692794b81f2ecad69a4adbba687f3836824ada ↗
- https://git.kernel.org/stable/c/4e8771a3666c8f216eefd6bd2fd50121c6c437db ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗