Namjae Jeon 815f1161d6 ksmbd: fix potential use-after-free in oplock/lease break ack ... commit 50f930db22 upstream. If ksmbd_iov_pin_rsp return error, use-after-free can happen by accessing opinfo->state and opinfo_put and ksmbd_fd_put could called twice. Reported-by: Ziyan Xu <research@securitygossip.com> Signed-off-by: Namjae Jeon <linkinjeon@kernel.org> Signed-off-by: Steve French <stfrench@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-07-17 18:37:24 +02:00
..
mgmt	ksmbd: fix use-after-free in ksmbd_session_rpc_open	2025-05-09 09:50:34 +02:00
asn1.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
asn1.h
auth.c	ksmbd: fix use-after-free in kerberos authentication	2025-05-09 09:50:35 +02:00
auth.h
connection.c	ksmbd: add free_transport ops in ksmbd connection	2025-06-27 11:11:42 +01:00
connection.h	ksmbd: provide zero as a unique ID to the Mac client	2025-07-06 11:01:33 +02:00
crypto_ctx.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
crypto_ctx.h
glob.h	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
Kconfig
ksmbd_netlink.h	ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL	2025-05-02 07:58:57 +02:00
ksmbd_spnego_negtokeninit.asn1
ksmbd_spnego_negtokentarg.asn1
ksmbd_work.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
ksmbd_work.h	ksmbd: fix use-after-free in ksmbd_free_work_struct	2025-03-22 12:54:24 -07:00
Makefile
misc.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
misc.h
ndr.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
ndr.h
nterr.h
ntlmssp.h
oplock.c	ksmbd: use list_first_entry_or_null for opinfo_get_list()	2025-06-04 14:43:54 +02:00
oplock.h	ksmbd: fix use-after-free in smb_break_all_levII_oplock()	2025-04-25 10:47:54 +02:00
server.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
server.h	ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL	2025-05-02 07:58:57 +02:00
smb_common.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
smb_common.h	ksmbd: check outstanding simultaneous SMB operations	2024-11-05 09:26:38 +09:00
smb2misc.c	smb: move SMB2 Status code to common header file	2024-09-15 10:42:44 -05:00
smb2ops.c	ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1	2024-04-02 09:21:25 -05:00
smb2pdu.c	ksmbd: fix potential use-after-free in oplock/lease break ack	2025-07-17 18:37:24 +02:00
smb2pdu.h	ksmbd: provide zero as a unique ID to the Mac client	2025-07-06 11:01:33 +02:00
smbacl.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
smbacl.h	smb: common: change the data type of num_aces to le16	2025-04-10 14:39:29 +02:00
smbfsctl.h
transport_ipc.c	ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL	2025-05-02 07:58:57 +02:00
transport_ipc.h	ksmbd: add support for supplementary groups	2024-10-11 11:02:14 -05:00
transport_rdma.c	smb: server: make use of rdma_destroy_qp()	2025-07-17 18:37:15 +02:00
transport_rdma.h
transport_tcp.c	ksmbd: add free_transport ops in ksmbd connection	2025-06-27 11:11:42 +01:00
transport_tcp.h	ksmbd: fix use-after-free in __smb2_lease_break_noti()	2025-05-02 07:58:57 +02:00
unicode.c	ksmbd: use __GFP_RETRY_MAYFAIL	2025-05-02 07:58:56 +02:00
unicode.h
vfs_cache.c	ksmbd: Fix UAF in __close_file_table_ids	2025-05-18 08:24:47 +02:00
vfs_cache.h	ksmbd: fix warning: comparison of distinct pointer types lacks a cast	2024-09-20 22:16:11 -05:00
vfs.c	ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()	2025-07-17 18:37:15 +02:00
vfs.h	ksmbd: retry iterate_dir in smb2_query_dir	2025-01-09 13:33:46 +01:00
xattr.h	ksmbd: Correct typos in multiple comments across various files	2024-09-25 21:33:22 -05:00