Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel. session that is freed through the global session table can be accessed again through ->sessions of connection.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < f0eb3f575138b816da74697bd506682574742fcdaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < a8a8ae303a8395cbac270b5b404d85df6ec788f8affected0626e6641f6b467447c81dd7678a69c66f7746cf to < ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9baffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 8ed0e9d2f410f63525afb8351181eea36c80bcf1affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 33cc29e221df7a3085ae413e8c26c4e81a151153affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 15a9605f8d69dc85005b1a00c31a050b8625e1aaaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.134 to ≤ 6.1.*unaffected6.6.87 to ≤ 6.6.*unaffected6.12.23 to ≤ 6.12.*unaffected6.13.11 to ≤ 6.13.*unaffected6.14.2 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f0eb3f575138b816da74697bd506682574742fcd ↗
- https://git.kernel.org/stable/c/a8a8ae303a8395cbac270b5b404d85df6ec788f8 ↗
- https://git.kernel.org/stable/c/ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9b ↗
- https://git.kernel.org/stable/c/8ed0e9d2f410f63525afb8351181eea36c80bcf1 ↗
- https://git.kernel.org/stable/c/33cc29e221df7a3085ae413e8c26c4e81a151153 ↗
- https://git.kernel.org/stable/c/15a9605f8d69dc85005b1a00c31a050b8625e1aa ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗