Critical · published February 22, 2024
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
The race is between the handling of a new TCP connection and
its disconnection. It leads to UAF on `struct tcp_transport` in
ksmbd_tcp_new_connection() function.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.15.0, < 5.15.149 | 5.15.149 |
| linux/linux_kernel | ≥ 5.16.0, < 6.1.75 | 6.1.75 |
| linux/linux_kernel | ≥ 6.2.0, < 6.6.14 | 6.6.14 |
| linux/linux_kernel | ≥ 6.7.0, < 6.7.2 | 6.7.2 |