Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, allowing use-after-free in multi-channel sessions (between lookup_chann_list() and ksmbd_chann_del). Adds rw_semaphore chann_lock to struct ksmbd_session and protects all xa_load/xa_store/xa_erase accesses.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1d9c4172110e645b383ff13eee759728d74f1a5d before 43ad494ac6e940a8eabf25d5bd77bb3bb53b1153; affected 1d9c4172110e645b383ff13eee759728d74f1a5d before 4c2ca31608521895dd742a43beca4b4d29762345; affected 1d9c4172110e645b383ff13eee759728d74f1a5d before e4a8a96a93d08570e0405cfd989a8a07e5b6ff33; affected 1d9c4172110e645b383ff13eee759728d74f1a5d before 36ef605c0395b94b826a8c8d6f2697071173de6e; affected 1d9c4172110e645b383ff13eee759728d74f1a5d before 4f3a06cc57976cafa8c6f716646be6c79a99e485; affected b1caecbf34b8c8260d851ec4efde71f3694460b7; affected 91bbf9cb2387a0d76322e9a343bc6bc160f66b3f; affected 853c416710b075153c1e1421e099ffbe5dac68ce; affected 5.15.145 before 5.16; affected 6.1.29 before 6.2; affected 6.2.16 before 6.3 |
| Linux / Linux | affected 6.3; unaffected 0 before 6.3; unaffected 6.6.160 through 6.6.*; unaffected 6.12.77 through 6.12.*; unaffected 6.18.11 through 6.18.*; unaffected 6.19.1 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/43ad494ac6e940a8eabf25d5bd77bb3bb53b1153
- https://git.kernel.org/stable/c/4c2ca31608521895dd742a43beca4b4d29762345
- https://git.kernel.org/stable/c/e4a8a96a93d08570e0405cfd989a8a07e5b6ff33
- https://git.kernel.org/stable/c/36ef605c0395b94b826a8c8d6f2697071173de6e
- https://git.kernel.org/stable/c/4f3a06cc57976cafa8c6f716646be6c79a99e485