Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs_tcp_ses_lock for tc_lock around tc_count changes. There was missing lock around tc_count increment inside smb2_find_smb_sess_tcon_unlocked().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
953953abb66e52c224057ab91e404284fefeab62 to < 7df1df6f40c0720d30206aa35c0343b962350e0daffected601dd3b79769b38d30b693c40afdb2a4b7edf9d0 to < 13fb413ae22a37c69341918a6d651d19a9b0b9b7affected3969db6b22e3d90d8c5f22ac1a7fe0350a94c136 to < bf4ebdb19ff9b3cdf992b50715fe61633327416aaffected96c4af418586ee9a6aab61738644366426e05316 to < e374f4e496fef8168784f93a4477d67be34485fdaffected96c4af418586ee9a6aab61738644366426e05316 to < 4d8690dace005a38e6dbde9ecce2da3ad85c7c41affected8c59eeeeffa1524ef57e173a89a1a3ff539888d5affected6.6.128 to < 6.6.142affected6.12.75 to < 6.12.92affected6.18.16 to < 6.18.34affected6.19.6 to < 6.20affected
Linux Linux
Default version status: affected
7.0affected0 to < 7.0unaffected6.6.142 to ≤ 6.6.*unaffected6.12.92 to ≤ 6.12.*unaffected6.18.34 to ≤ 6.18.*unaffected7.0.11 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0d ↗
- https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7 ↗
- https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416a ↗
- https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fd ↗
- https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41 ↗