Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbd_kthread_fn(), the code sets ret = -EAGAIN and continues the accept loop without closing the just-accepted socket. That leaks one socket per rejected attempt from a single IP and enables a trivial remote DoS. Release client_sk before continuing. This bug was found with ZeroPath.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0626e6641f6b467447c81dd7678a69c66f7746cf to < 7a3c7154d5fc05956a8ad9e72ecf49e21555bfcaaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 5746b2a0f5eb3d79667b3c51fe849bd62464220eaffected0626e6641f6b467447c81dd7678a69c66f7746cf to < 4587a7826be1ae0190dba10ff70b46bb0e3bc7d3affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 35521b5a7e8a184548125f4530552101236dcda1affected0626e6641f6b467447c81dd7678a69c66f7746cf to < 98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.159 to ≤ 6.1.*unaffected6.6.117 to ≤ 6.6.*unaffected6.12.59 to ≤ 6.12.*unaffected6.17.9 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7a3c7154d5fc05956a8ad9e72ecf49e21555bfca ↗
- https://git.kernel.org/stable/c/5746b2a0f5eb3d79667b3c51fe849bd62464220e ↗
- https://git.kernel.org/stable/c/4587a7826be1ae0190dba10ff70b46bb0e3bc7d3 ↗
- https://git.kernel.org/stable/c/35521b5a7e8a184548125f4530552101236dcda1 ↗
- https://git.kernel.org/stable/c/98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9 ↗