Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn->preauth_info is not allocated. This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore session setup request if smb2 negotiate phase is not complete.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < 2d3461d6ae74ebdcd4d65128c855198649bcadcdaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < cce57cd8c5dead24127cf2308fdd60fcad2d6ba6affected0626e6641f6b467447c81dd7678a69c66f7746cf to < ca8bed31edf728a662ef9d6f39f50e7a7dc2b5adaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4daffected0626e6641f6b467447c81dd7678a69c66f7746cf to < b8eb243e670ecf30e91524dd12f7260dac07d335affected0626e6641f6b467447c81dd7678a69c66f7746cf to < c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.191 to ≤ 6.1.*unaffected6.6.107 to ≤ 6.6.*unaffected6.12.23 to ≤ 6.12.*unaffected6.13.11 to ≤ 6.13.*unaffected6.14.2 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2d3461d6ae74ebdcd4d65128c855198649bcadcd ↗
- https://git.kernel.org/stable/c/cce57cd8c5dead24127cf2308fdd60fcad2d6ba6 ↗
- https://git.kernel.org/stable/c/ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad ↗
- https://git.kernel.org/stable/c/8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d ↗
- https://git.kernel.org/stable/c/b8eb243e670ecf30e91524dd12f7260dac07d335 ↗
- https://git.kernel.org/stable/c/c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780 ↗
- https://www.zerodayinitiative.com/advisories/ZDI-25-310/ ↗