linux/fs/smb
Namjae Jeon ca8bed31ed ksmbd: fix null pointer dereference in alloc_preauth_hash()
commit c8b5b7c5da upstream.

The Client send malformed smb2 negotiate request. ksmbd return error
response. Subsequently, the client can send smb2 session setup even
thought conn->preauth_info is not allocated.
This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore
session setup request if smb2 negotiate phase is not complete.

Cc: stable@vger.kernel.org
Tested-by: Steve French <stfrench@microsoft.com>
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-26505
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2025-04-10 14:39:39 +02:00
..
client cifs: fix incorrect validation for num_aces field of smb_acl 2025-04-10 14:39:29 +02:00
common smb: common: change the data type of num_aces to le16 2025-04-10 14:39:29 +02:00
server ksmbd: fix null pointer dereference in alloc_preauth_hash() 2025-04-10 14:39:39 +02:00
Kconfig smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00
Makefile smb: move client and server files to common directory fs/smb 2023-05-24 16:29:21 -05:00