smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.1%
exploitation probability
0.1%top 97% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/04dd114b682a4ccaeba2c2bad049c8b50ce740d8https://git.kernel.org/stable/c/2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29https://git.kernel.org/stable/c/7c28f8eef5ac5312794d8a52918076dcd787e53bhttps://git.kernel.org/stable/c/a2c68e256fb7a4ac34154c6e865a1389acca839fhttps://git.kernel.org/stable/c/ac18761b530b5dd40f59af8a25902282e5512854https://git.kernel.org/stable/c/fdda836fcee6fdbcccc24e3679097efb583f581f