Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup and ksmbd_sessions_deregister. The session can be freed before the connection is added to channel list of session. This patch check reference count of session before freeing it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < 596407adb9af1ee75fe7c7529607783d31b66e7faffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 3980770cb1470054e6400fd97668665975726737affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 9069939d762138e232a6f79e3e1462682ed6a17daffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 94c281721d4ed2d972232414b91d98a6f5bdb16baffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 7dfbd4c43eed91dd2548a95236908025707a8dfdaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345dbaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.134 to ≤ 6.1.*unaffected6.6.87 to ≤ 6.6.*unaffected6.12.23 to ≤ 6.12.*unaffected6.13.11 to ≤ 6.13.*unaffected6.14.2 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/596407adb9af1ee75fe7c7529607783d31b66e7f ↗
- https://git.kernel.org/stable/c/3980770cb1470054e6400fd97668665975726737 ↗
- https://git.kernel.org/stable/c/9069939d762138e232a6f79e3e1462682ed6a17d ↗
- https://git.kernel.org/stable/c/94c281721d4ed2d972232414b91d98a6f5bdb16b ↗
- https://git.kernel.org/stable/c/7dfbd4c43eed91dd2548a95236908025707a8dfd ↗
- https://git.kernel.org/stable/c/fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗