kernel.git/fs/smb/server/mgmt, branch linux-6.7.yHosts the 0x221E linux distro kernel.
https://git.0xinfinity.dev/distro/kernel.git/atom?h=linux-6.7.y2023-10-23T00:06:27Zksmbd: Remove unused field in ksmbd_user struct2023-10-23T00:06:27ZCheng-Han Wu2023-10-02T05:32:03Zurn:sha1:eacc655e18d1dec9b50660d16a1ddeeb4d6c48f2
fs/smb/server/mgmt/user_config.h:21: Remove the unused field 'failed_login_count' from the ksmbd_user struct.
Signed-off-by: Cheng-Han Wu <hank20010209@gmail.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
ksmbd: fix race condition between tree conn lookup and disconnect2023-10-05T02:56:28ZNamjae Jeon2023-10-05T02:22:03Zurn:sha1:33b235a6e6ebe0f05f3586a71e8d281d00f71e2e
if thread A in smb2_write is using work-tcon, other thread B use
smb2_tree_disconnect free the tcon, then thread A will use free'd tcon.
Time
+
Thread A | Thread A
smb2_write | smb2_tree_disconnect
|
|
| kfree(tree_conn)
|
// UAF! |
work->tcon->share_conf |
+
This patch add state, reference count and lock for tree conn to fix race
condition issue.
Reported-by: luosili <rootlab@huawei.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
ksmbd: fix race condition between session lookup and expire2023-10-05T01:21:48ZNamjae Jeon2023-10-04T09:25:01Zurn:sha1:53ff5cf89142b978b1a5ca8dc4d4425e6a09745f
Thread A + Thread B
ksmbd_session_lookup | smb2_sess_setup
sess = xa_load |
|
| xa_erase(&conn->sessions, sess->id);
|
| ksmbd_session_destroy(sess) --> kfree(sess)
|
// UAF! |
sess->last_active = jiffies |
+
This patch add rwsem to fix race condition between ksmbd_session_lookup
and ksmbd_expire_session.
Reported-by: luosili <rootlab@huawei.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
ksmbd: fix `force create mode' and `force directory mode'2023-08-29T17:30:20ZAtte Heikkilä2023-08-10T20:01:32Zurn:sha1:65656f5242e500dcfeffa6a0a1519eae14724f86
`force create mode' and `force directory mode' should be bitwise ORed
with the perms after `create mask' and `directory mask' have been
applied, respectively.
Signed-off-by: Atte Heikkilä <atteh.mailbox@gmail.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
ksmbd: remove unused ksmbd_tree_conn_share function2023-06-26T05:07:04ZNamjae Jeon2023-05-05T15:06:56Zurn:sha1:7bd9f0876fdef00f4e155be35e6b304981a53f80
Remove unused ksmbd_tree_conn_share function.
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
smb: move client and server files to common directory fs/smb2023-05-24T21:29:21ZSteve French2023-05-22T01:46:30Zurn:sha1:38c8a9a52082579090e34c033d439ed2cd1a462d
Move CIFS/SMB3 related client and server files (cifs.ko and ksmbd.ko
and helper modules) to new fs/smb subdirectory:
fs/cifs --> fs/smb/client
fs/ksmbd --> fs/smb/server
fs/smbfs_common --> fs/smb/common
Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>