diff options
| author | Joshua Rogers <[email protected]> | 2025-11-08 14:59:23 +0000 |
|---|---|---|
| committer | Steve French <[email protected]> | 2025-11-09 23:47:52 +0000 |
| commit | 98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9 (patch) | |
| tree | 1317104aa262b5a084c62da667fdd1d11aaa74cd /lib/mpi/mpi-scan.c | |
| parent | smb: server: rdma: avoid unmapping posted recv on accept failure (diff) | |
| download | kernel-98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9.tar.gz kernel-98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9.zip | |
ksmbd: close accepted socket when per-IP limit rejects connection
When the per-IP connection limit is exceeded in ksmbd_kthread_fn(),
the code sets ret = -EAGAIN and continues the accept loop without
closing the just-accepted socket. That leaks one socket per rejected
attempt from a single IP and enables a trivial remote DoS.
Release client_sk before continuing.
This bug was found with ZeroPath.
Cc: [email protected]
Signed-off-by: Joshua Rogers <[email protected]>
Acked-by: Namjae Jeon <[email protected]>
Signed-off-by: Steve French <[email protected]>
Diffstat (limited to 'lib/mpi/mpi-scan.c')
0 files changed, 0 insertions, 0 deletions