Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeros both ->next and ->prev to NULL instead of pointing to itself, making list_empty() always return false and list_add() dereference a NULL ->prev pointer. Also, cifs_signal_cifsd_for_reconnect() can be called concurrently from multiple cifsd threads, allowing the same server's rlist node to be added twice into the local list, corrupting it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b5f924ffbfa976e4b97f17e8132c595b97482c2daffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5a8f82f9c5839389cf4036029dd75a9911049e83affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 04082b1833856cb9ed87e0d3d5f04cbf836cf7daaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c037d6bde3dd5fa00b017b6b98a5389ec0ebc02faffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5f270f091256da1338c3631083e15d7f83cc05e1affected0 to < 6.6.158affected0 to < 6.12.112affected0 to < 6.18.54affected0 to < 7.2.8affected
Linux Linux
Default version status: affected
6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b5f924ffbfa976e4b97f17e8132c595b97482c2d ↗
- https://git.kernel.org/stable/c/5a8f82f9c5839389cf4036029dd75a9911049e83 ↗
- https://git.kernel.org/stable/c/04082b1833856cb9ed87e0d3d5f04cbf836cf7da ↗
- https://git.kernel.org/stable/c/c037d6bde3dd5fa00b017b6b98a5389ec0ebc02f ↗
- https://git.kernel.org/stable/c/5f270f091256da1338c3631083e15d7f83cc05e1 ↗