Namjae Jeon 53ff5cf891 ksmbd: fix race condition between session lookup and expire ...

Thread A                        +  Thread B
 ksmbd_session_lookup            |  smb2_sess_setup
   sess = xa_load                |
                                 |
                                 |    xa_erase(&conn->sessions, sess->id);
                                 |
                                 |    ksmbd_session_destroy(sess) --> kfree(sess)
                                 |
   // UAF!                       |
   sess->last_active = jiffies   |
                                 +

This patch add rwsem to fix race condition between ksmbd_session_lookup
and ksmbd_expire_session.

Reported-by: luosili <rootlab@huawei.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>

2023-10-04 20:21:48 -05:00

..

client

fs/smb/client: Reset password pointer to NULL

2023-09-28 14:49:51 -05:00

common

smb3: fix minor typo in SMB2_GLOBAL_CAP_LARGE_MTU

2023-09-08 19:01:16 -05:00

server

ksmbd: fix race condition between session lookup and expire

2023-10-04 20:21:48 -05:00

Kconfig

…

Makefile

…