This is a note to let you know that I've just added the patch titled
ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
to the 5.15-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
ksmbd-fix-null-pointer-dereference-in-smb2_get_info_filesystem.patch
and it can be found in the queue-5.15 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 3ac00a2ab69b34189942afa9e862d5170cdcb018 Mon Sep 17 00:00:00 2001
From: Namjae Jeon <linkinjeon@xxxxxxxxxx>
Date: Wed, 3 May 2023 08:38:33 +0900
Subject: ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
From: Namjae Jeon <linkinjeon@xxxxxxxxxx>
commit 3ac00a2ab69b34189942afa9e862d5170cdcb018 upstream.
If share is , share->path is NULL and it cause NULL pointer
dereference issue.
Cc: stable@xxxxxxxxxxxxxxx
Reported-by: zdi-disclosures@xxxxxxxxxxxxxx # ZDI-CAN-20479
Signed-off-by: Namjae Jeon <linkinjeon@xxxxxxxxxx>
Signed-off-by: Steve French <stfrench@xxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
fs/ksmbd/smb2pdu.c | 3 +++
1 file changed, 3 insertions(+)
--- a/fs/ksmbd/smb2pdu.c
+++ b/fs/ksmbd/smb2pdu.c
@@ -4879,6 +4879,9 @@ static int smb2_get_info_filesystem(stru
int rc = 0, len;
int fs_infoclass_size = 0;
+ if (!share->path)
+ return -EIO;
+
rc = kern_path(share->path, LOOKUP_NO_SYMLINKS, &path);
if (rc) {
pr_err("cannot create vfs path\n");
Patches currently in stable-queue which might be from linkinjeon@xxxxxxxxxx are
queue-5.15/ksmbd-fix-memleak-in-session-setup.patch
queue-5.15/ksmbd-fix-null-pointer-dereference-in-smb2_get_info_filesystem.patch
queue-5.15/ksmbd-call-rcu_barrier-in-ksmbd_server_exit.patch
