Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is a race condition between ksmbd_smb2_session_create and ksmbd_expire_session. This patch add missing sessions_table_lock while adding/deleting session from global session table.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < f56446ba5378d19e31040b548a14ee9a8f1500eaaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < e923503a56b3385b64ae492e3225e4623f560c5baffected0626e6641f6b467447c81dd7678a69c66f7746cf to < e7a2ad2044377853cf8c59528dac808a08a99c72affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 0a77715db22611df50b178374c51e2ba0d58866eaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.117 to ≤ 6.1.*unaffected6.6.61 to ≤ 6.6.*unaffected6.11.8 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f56446ba5378d19e31040b548a14ee9a8f1500ea ↗
- https://git.kernel.org/stable/c/e923503a56b3385b64ae492e3225e4623f560c5b ↗
- https://git.kernel.org/stable/c/e7a2ad2044377853cf8c59528dac808a08a99c72 ↗
- https://git.kernel.org/stable/c/0a77715db22611df50b178374c51e2ba0d58866e ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗