Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_session_put should be called under smb3_preauth_hash_rsp(). It will avoid freeing session before calling smb3_preauth_hash_rsp().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < cb645064e0811053c94e86677f2e58ed29359d62affected0626e6641f6b467447c81dd7678a69c66f7746cf to < f7557bbca40d4ca8bb1c6c940ac6c95078bd0827affected0626e6641f6b467447c81dd7678a69c66f7746cf to < c6cdc08c25a868a08068dfc319fa9fce982b8e7faffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 1b6ad475d4ed577d34e0157eb507be00c588bf5caffected0626e6641f6b467447c81dd7678a69c66f7746cf to < b8fc56fbca7482c1e5c0e3351c6ae78982e25adaaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected5.15.174 to ≤ 5.15.*unaffected6.1.117 to ≤ 6.1.*unaffected6.6.61 to ≤ 6.6.*unaffected6.11.8 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/cb645064e0811053c94e86677f2e58ed29359d62 ↗
- https://git.kernel.org/stable/c/f7557bbca40d4ca8bb1c6c940ac6c95078bd0827 ↗
- https://git.kernel.org/stable/c/c6cdc08c25a868a08068dfc319fa9fce982b8e7f ↗
- https://git.kernel.org/stable/c/1b6ad475d4ed577d34e0157eb507be00c588bf5c ↗
- https://git.kernel.org/stable/c/b8fc56fbca7482c1e5c0e3351c6ae78982e25ada ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗