ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 1.0%
exploitation probability
1.0%top 39% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
The race is between the handling of a new TCP connection and
its disconnection. It leads to UAF on `struct tcp_transport` in
ksmbd_tcp_new_connection() function.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/24290ba94cd0136e417283b0dbf8fcdabcf62111https://git.kernel.org/stable/c/380965e48e9c32ee4263c023e1d830ea7e462ed1https://git.kernel.org/stable/c/38d20c62903d669693a1869aa68c4dd5674e2544https://git.kernel.org/stable/c/69d54650b751532d1e1613a4fb433e591aeef126https://git.kernel.org/stable/c/999daf367b924fdf14e9d83e034ee0f86bc17ec6