Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set ->PreviousSessionId on kerberos session setup stage, NULL pointer dereference error will happen. Since sess->user is not set yet, It can pass the user argument as NULL to destroy_previous_session. sess->user will be set in ksmbd_krb5_authenticate(). So this patch move calling destroy_previous_session() after ksmbd_krb5_authenticate().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < 281afc52e2961cd5dd8326ebc9c5bc40904c0468affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 0902625a24eea7fdc187faa5d97df244d159dd6eaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 1193486dffb7432a09f57f5d09049b4d4123538baffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 076f1adefb9837977af7ed233883842ddc446644affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 7ac5b66acafcc9292fb935d7e03790f2b8b2dc0eaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.142 to ≤ 6.1.*unaffected6.6.95 to ≤ 6.6.*unaffected6.12.35 to ≤ 6.12.*unaffected6.15.4 to ≤ 6.15.*unaffected6.16 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/281afc52e2961cd5dd8326ebc9c5bc40904c0468 ↗
- https://git.kernel.org/stable/c/0902625a24eea7fdc187faa5d97df244d159dd6e ↗
- https://git.kernel.org/stable/c/1193486dffb7432a09f57f5d09049b4d4123538b ↗
- https://git.kernel.org/stable/c/076f1adefb9837977af7ed233883842ddc446644 ↗
- https://git.kernel.org/stable/c/7ac5b66acafcc9292fb935d7e03790f2b8b2dc0e ↗
- https://www.zerodayinitiative.com/advisories/ZDI-25-610/ ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗