linux-kernel - [GIT PULL] ksmbd server fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Sat, 7 Oct 2023 23:27:16 -0500
From:   Steve French <smfrench@...il.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     Namjae Jeon <linkinjeon@...nel.org>,
        CIFS <linux-cifs@...r.kernel.org>,
        LKML <linux-kernel@...r.kernel.org>
Subject: [GIT PULL] ksmbd server fixes

Please pull the following changes since commit
8a749fd1a8720d4619c91c8b6e7528c0a355c0aa:

  Linux 6.6-rc4 (2023-10-01 14:15:13 -0700)

are available in the Git repository at:

  git://git.samba.org/ksmbd.git tags/6.6-rc4-ksmbd-server-fixes

for you to fetch changes up to 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e:

  ksmbd: fix race condition between tree conn lookup and disconnect
(2023-10-04 21:56:28 -0500)

----------------------------------------------------------------
Six SMB3 server fixes for various races found by RO0T Lab of Huawei:
- Fix oops when race between oplock break ack and freeing file
- Simultaneous request fixes:for parallel logoffs, and for parallel
lock requests
- Fixes for tree disconnect race, session expire race, and close/open race

----------------------------------------------------------------
Namjae Jeon (5):
      ksmbd: fix race condition between session lookup and expire
      ksmbd: fix race condition with fp
      ksmbd: fix race condition from parallel smb2 logoff requests
      ksmbd: fix race condition from parallel smb2 lock requests
      ksmbd: fix race condition between tree conn lookup and disconnect

luosili (1):
      ksmbd: fix uaf in smb20_oplock_break_ack

 fs/smb/server/connection.c        |  2 +
 fs/smb/server/connection.h        |  1 +
 fs/smb/server/mgmt/tree_connect.c | 42 +++++++++++++++--
 fs/smb/server/mgmt/tree_connect.h | 11 ++++-
 fs/smb/server/mgmt/user_session.c | 11 +++--
 fs/smb/server/mgmt/user_session.h |  1 +
 fs/smb/server/server.c            |  2 +
 fs/smb/server/smb2pdu.c           | 94 +++++++++++++++++++++++++--------------
 fs/smb/server/vfs_cache.c         | 23 ++++++++--
 fs/smb/server/vfs_cache.h         |  9 ++++
 10 files changed, 151 insertions(+), 45 deletions(-)

-- 
Thanks,

Steve