Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 931dc8a3670f71c45c0b1379ea4e92dafbda1aca; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 70ad6455139e26e85f48f95d0e21f351c1909342; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before d5ec1d79509b3ee01de02c236f096bc050221b7f; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 02d16046cd11a5c037b28c12ffb818c56dd3ef43; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 2fc9feff45d92a92cd5f96487655d5be23fb7e2b |
| Linux / Linux | affected 5.15; unaffected 0 before 5.15; unaffected 6.1.159 through 6.1.*; unaffected 6.6.119 through 6.6.*; unaffected 6.12.28 through 6.12.*; unaffected 6.14.6 through 6.14.*; unaffected 6.15 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/931dc8a3670f71c45c0b1379ea4e92dafbda1aca
- https://git.kernel.org/stable/c/70ad6455139e26e85f48f95d0e21f351c1909342
- https://git.kernel.org/stable/c/d5ec1d79509b3ee01de02c236f096bc050221b7f
- https://git.kernel.org/stable/c/02d16046cd11a5c037b28c12ffb818c56dd3ef43
- https://git.kernel.org/stable/c/2fc9feff45d92a92cd5f96487655d5be23fb7e2b
ADP enrichment
No English description supplied.