[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAH2r5mvzuQBU4UKEHMKjSDQHiHsGAx_VPRuwkr2BVcmT81wuCw@mail.gmail.com>
Date: Sat, 7 Oct 2023 23:27:16 -0500
From: Steve French <smfrench@...il.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Namjae Jeon <linkinjeon@...nel.org>,
CIFS <linux-cifs@...r.kernel.org>,
LKML <linux-kernel@...r.kernel.org>
Subject: [GIT PULL] ksmbd server fixes
Please pull the following changes since commit
8a749fd1a8720d4619c91c8b6e7528c0a355c0aa:
Linux 6.6-rc4 (2023-10-01 14:15:13 -0700)
are available in the Git repository at:
git://git.samba.org/ksmbd.git tags/6.6-rc4-ksmbd-server-fixes
for you to fetch changes up to 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e:
ksmbd: fix race condition between tree conn lookup and disconnect
(2023-10-04 21:56:28 -0500)
----------------------------------------------------------------
Six SMB3 server fixes for various races found by RO0T Lab of Huawei:
- Fix oops when race between oplock break ack and freeing file
- Simultaneous request fixes:for parallel logoffs, and for parallel
lock requests
- Fixes for tree disconnect race, session expire race, and close/open race
----------------------------------------------------------------
Namjae Jeon (5):
ksmbd: fix race condition between session lookup and expire
ksmbd: fix race condition with fp
ksmbd: fix race condition from parallel smb2 logoff requests
ksmbd: fix race condition from parallel smb2 lock requests
ksmbd: fix race condition between tree conn lookup and disconnect
luosili (1):
ksmbd: fix uaf in smb20_oplock_break_ack
fs/smb/server/connection.c | 2 +
fs/smb/server/connection.h | 1 +
fs/smb/server/mgmt/tree_connect.c | 42 +++++++++++++++--
fs/smb/server/mgmt/tree_connect.h | 11 ++++-
fs/smb/server/mgmt/user_session.c | 11 +++--
fs/smb/server/mgmt/user_session.h | 1 +
fs/smb/server/server.c | 2 +
fs/smb/server/smb2pdu.c | 94 +++++++++++++++++++++++++--------------
fs/smb/server/vfs_cache.c | 23 ++++++++--
fs/smb/server/vfs_cache.h | 9 ++++
10 files changed, 151 insertions(+), 45 deletions(-)
--
Thanks,
Steve
Powered by blists - more mailing lists