ksmbd: fix racy issue under cocurrent smb2 tree disconnect
authorNamjae Jeon <linkinjeon@kernel.org>
Tue, 2 May 2023 23:51:12 +0000 (08:51 +0900)
committerSteve French <stfrench@microsoft.com>
Thu, 4 May 2023 04:03:02 +0000 (23:03 -0500)
commit30210947a343b6b3ca13adc9bfc88e1543e16dd5
treeb975ba955a52288885c013b107e7114523c3c24b
parentabcc506a9a71976a8b4c9bf3ee6efd13229c1e19
ksmbd: fix racy issue under cocurrent smb2 tree disconnect

There is UAF issue under cocurrent smb2 tree disconnect.
This patch introduce TREE_CONN_EXPIRE flags for tcon to avoid cocurrent
access.

Cc: stable@vger.kernel.org
Reported-by: zdi-disclosures@trendmicro.com # ZDI-CAN-20592
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/ksmbd/mgmt/tree_connect.c
fs/ksmbd/mgmt/tree_connect.h
fs/ksmbd/smb2pdu.c