Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < fbf5c0845ed15122a770bca9be1d9b60b470d3aaaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < b69fd87076daa66f3d186bd421a7b0ee0cb45829affected0626e6641f6b467447c81dd7678a69c66f7746cf to < edeecc7871e8fc0878d53ce286c75040a0e38f6caffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fcaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 6613887da1d18dd2ecfd6c6148a873c4d903ebdcaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.148 to ≤ 6.1.*unaffected6.6.102 to ≤ 6.6.*unaffected6.12.42 to ≤ 6.12.*unaffected6.15.10 to ≤ 6.15.*unaffected6.16.1 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/fbf5c0845ed15122a770bca9be1d9b60b470d3aa ↗
- https://git.kernel.org/stable/c/b69fd87076daa66f3d186bd421a7b0ee0cb45829 ↗
- https://git.kernel.org/stable/c/edeecc7871e8fc0878d53ce286c75040a0e38f6c ↗
- https://git.kernel.org/stable/c/7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc ↗
- https://git.kernel.org/stable/c/6613887da1d18dd2ecfd6c6148a873c4d903ebdc ↗
- https://git.kernel.org/stable/c/44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6 ↗
- https://www.zerodayinitiative.com/advisories/ZDI-25-916/ ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗