Namjae Jeon 09aeab6803 ksmbd: prevent connection release during oplock break notification ...

commit 3aa660c059240e0c795217182cf7df32909dd917 upstream.

ksmbd_work could be freed when after connection release.
Increment r_count of ksmbd_conn to indicate that requests
are not finished yet and to not release the connection.

Cc: stable@vger.kernel.org
Reported-by: Norbert Szetei <norbert@doyensec.com>
Tested-by: Norbert Szetei <norbert@doyensec.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-03-22 12:50:47 -07:00

..

mgmt

ksmbd: fix racy issue from session lookup and expire

2024-12-19 18:11:21 +01:00

asn1.c

ksmbd: validate mech token in session setup

2024-01-25 15:35:44 -08:00

asn1.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

auth.c

ksmbd: fix racy issue from session lookup and expire

2024-12-19 18:11:21 +01:00

auth.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

connection.c

ksmbd: prevent connection release during oplock break notification

2025-03-22 12:50:47 -07:00

connection.h

ksmbd: prevent connection release during oplock break notification

2025-03-22 12:50:47 -07:00

crypto_ctx.c

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

crypto_ctx.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

glob.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

Kconfig

ksmbd: remove experimental warning

2023-09-03 21:06:36 -05:00

ksmbd_netlink.h

ksmbd: add continuous availability share parameter

2024-05-25 16:22:52 +02:00

ksmbd_spnego_negtokeninit.asn1

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

ksmbd_spnego_negtokentarg.asn1

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

ksmbd_work.c

ksmbd: fix use-after-free in ksmbd_free_work_struct

2025-03-22 12:50:47 -07:00

ksmbd_work.h

ksmbd: fix use-after-free in ksmbd_free_work_struct

2025-03-22 12:50:47 -07:00

Makefile

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

misc.c

ksmbd: Add kernel-doc for ksmbd_extract_sharename() function

2024-05-25 16:22:46 +02:00

misc.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

ndr.c

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

ndr.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

nterr.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

ntlmssp.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

oplock.c

ksmbd: prevent connection release during oplock break notification

2025-03-22 12:50:47 -07:00

oplock.h

ksmbd: fix use-after-free in ksmbd_free_work_struct

2025-03-22 12:50:47 -07:00

server.c

ksmbd: prevent connection release during oplock break notification

2025-03-22 12:50:47 -07:00

server.h

ksmbd: fix broken transfers when exceeding max simultaneous operations

2024-12-27 13:58:48 +01:00

smb2misc.c

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

2024-05-25 16:22:50 +02:00

smb2ops.c

ksmbd: add support for durable handles v1/v2

2024-05-25 16:22:49 +02:00

smb2pdu.c

ksmbd: fix bug on trap in smb2_lock

2025-03-13 12:58:24 +01:00

smb2pdu.h

ksmbd: Implement new SMB3 POSIX type

2025-01-17 13:36:18 +01:00

smb_common.c

smb: server: Fix building with GCC 15

2025-01-02 10:32:05 +01:00

smb_common.h

ksmbd: check outstanding simultaneous SMB operations

2024-11-14 13:19:35 +01:00

smbacl.c

ksmbd: fix out-of-bounds in parse_sec_desc()

2025-03-13 12:58:23 +01:00

smbacl.h

ksmbd: fix possible deadlock in smb2_open

2023-12-08 08:52:15 +01:00

smbfsctl.h

cifs: correct references in Documentation to old fs/cifs path

2023-05-24 16:29:21 -05:00

smbstatus.h

cifs: correct references in Documentation to old fs/cifs path

2023-05-24 16:29:21 -05:00

transport_ipc.c

ksmbd: fix type confusion via race condition when using ipc_msg_send_request

2025-03-13 12:58:23 +01:00

transport_ipc.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

transport_rdma.c

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

2024-01-25 15:35:44 -08:00

transport_rdma.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

transport_tcp.c

ksmbd: Unlock on in ksmbd_tcp_set_interfaces()

2024-09-12 11:11:25 +02:00

transport_tcp.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00

unicode.c

ksmbd: add support for surrogate pair conversion

2024-01-05 15:19:38 +01:00

unicode.h

fs/smb: Swing unicode common code from smb->NLS

2023-08-30 08:55:51 -05:00

vfs_cache.c

ksmbd: add refcnt to ksmbd_conn struct

2024-10-10 11:57:39 +02:00

vfs_cache.h

ksmbd: use rwsem instead of rwlock for lease break

2024-06-21 14:38:21 +02:00

vfs.c

ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked

2025-01-17 13:36:16 +01:00

vfs.h

ksmbd: retry iterate_dir in smb2_query_dir

2025-01-09 13:32:04 +01:00

xattr.h

smb: move client and server files to common directory fs/smb

2023-05-24 16:29:21 -05:00