tree 70a1d098e353cead1fdf069dcf1687a77d5ea4c0
parent 576efcf4e8be2ce88f088293e31d0c4ae15f5484
author Paulo Alcantara <pc@manguebit.com> 1712086434 -0300
committer Michael Kochera <kochera@google.com> 1744317955 -0700

smb: client: fix potential UAF in cifs_dump_full_key()

commit 58acd1f497162e7d282077f816faa519487be045 upstream.

Skip sessions that are being teared down (status == SES_EXITING) to
avoid UAF.

BUG=b/386933082
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2024-35866 in the Linux kernel.

cos-patch: security-high
Cc: stable@vger.kernel.org
Change-Id: Ic0c9da188cee6c2d13e406778aeb3459ce809ece
Signed-off-by: Paulo Alcantara (Red Hat) <pc@manguebit.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Jianqi Ren <jianqi.ren.cn@windriver.com>
Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kernel CVE Triage Automation <cloud-image-kernel-cve-triage-automation@prod.google.com>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/98351
Reviewed-by: Michael Kochera <kochera@google.com>
Reviewed-by: Arnav Kansal <rnv@google.com>
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>