diff options
| author | Namjae Jeon <linkinjeon@kernel.org> | 2025-03-05 21:21:43 +0900 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2025-03-10 12:54:28 -0500 |
| commit | bb39ed47065455604729404729d9116868638d31 (patch) | |
| tree | 11a767c66e1d6ef3c96d4eec00ce4291119f9d2b /fs/smb/server/oplock.h | |
| parent | 80e54e84911a923c40d7bee33a34c1b4be148d7a (diff) | |
ksmbd: fix use-after-free in ksmbd_free_work_struct
->interim_entry of ksmbd_work could be deleted after oplock is freed.
We don't need to manage it with linked list. The interim request could be
immediately sent whenever a oplock break wait is needed.
Cc: stable@vger.kernel.org
Reported-by: Norbert Szetei <norbert@doyensec.com>
Tested-by: Norbert Szetei <norbert@doyensec.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'fs/smb/server/oplock.h')
| -rw-r--r-- | fs/smb/server/oplock.h | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/fs/smb/server/oplock.h b/fs/smb/server/oplock.h index 72bc88a63a40..3f64f0787263 100644 --- a/fs/smb/server/oplock.h +++ b/fs/smb/server/oplock.h @@ -67,7 +67,6 @@ struct oplock_info { bool is_lease; bool open_trunc; /* truncate on open */ struct lease *o_lease; - struct list_head interim_list; struct list_head op_entry; struct list_head lease_entry; wait_queue_head_t oplock_q; /* Other server threads */ |