In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open ksmbd_lookup_fd_cguid() returns a ksmbd_file with its refcou…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open ksmbd_lookup_fd_cguid() returns a ksmbd_file with its refcount incremented via ksmbd_fp_get(). parse_durable_handle_context() in the DURABLE_REQ_V2 case properly releases this reference on every path inside the ClientGUID-match branch, either by calling ksmbd_put_durable_fd() or by transferring ownership to dh_info->fp for a successful reconnect. However, wh…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/06f709d0e531f3e54d88665dd426be3998a774e6 Patch
- https://git.kernel.org/stable/c/407b6e699ba8b45b72cc265eed8a1bc8a7191609 Patch
- https://git.kernel.org/stable/c/804054d19886ac6628883d82410f6ee42a818664 Patch
- https://git.kernel.org/stable/c/8c4a0ef19c8264c150833131af34541495832cd0 Patch
- https://git.kernel.org/stable/c/f31beef633fbf2b5af7805fa187a10bcff1d4b49 Patch
Timeline
- nvd_ingest NVD