Zilin GuanandGreg Kroah-Hartman bc390b2737 cifs: Fix memory and information leak in smb3_reconfigure() ...

[ Upstream commit cb6d5aa9c0 ]

In smb3_reconfigure(), if smb3_sync_session_ctx_passwords() fails, the
function returns immediately without freeing and erasing the newly
allocated new_password and new_password2. This causes both a memory leak
and a potential information leak.

Fix this by calling kfree_sensitive() on both password buffers before
returning in this error case.

Fixes: 0f0e357902 ("cifs: during remount, make sure passwords are in sync")
Signed-off-by: Zilin Guan <zilin@seu.edu.cn>
Reviewed-by: ChenXiaoSong <chenxiaosong@kylinos.cn>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-01-11 15:21:54 +01:00

..

asn1.c

…

cached_dir.c

smb: client: fix incomplete backport in cfids_invalidation_worker()

2025-12-01 11:41:51 +01:00

cached_dir.h

…

cifs_debug.c

smb: client: make use of common smbdirect_socket

2025-08-15 12:09:04 +02:00

cifs_debug.h

…

cifs_fs_sb.h

…

cifs_ioctl.h

…

cifs_spnego_negtokeninit.asn1

…

cifs_spnego.c

…

cifs_spnego.h

…

cifs_swn.c

…

cifs_swn.h

…

cifs_unicode.c

cifs: prevent NULL pointer dereference in UTF16 conversion

2025-09-09 18:56:28 +02:00

cifs_unicode.h

…

cifsacl.c

…

cifsacl.h

…

cifsencrypt.c

…

cifsfs.c

cifs: fix typo in enable_gcm_256 module parameter

2025-12-01 11:41:49 +01:00

cifsfs.h

…

cifsglob.h

cifs: Fix TCP_Server_Info::credits to be signed

2025-10-29 14:07:02 +01:00

cifspdu.h

…

cifsproto.h

…

cifsroot.c

…

cifssmb.c

cifs: Fix calling CIFSFindFirst() for root path without msearch

2025-08-28 16:28:25 +02:00

connect.c

smb: client: fix memory leak in cifs_construct_tcon()

2025-12-07 06:18:51 +09:00

dfs_cache.c

…

dfs_cache.h

…

dfs.c

…

dfs.h

…

dir.c

…

dns_resolve.c

…

dns_resolve.h

…

export.c

…

file.c

cifs: Fix uncached read into ITER_KVEC iterator

2025-11-24 10:30:01 +01:00

fs_context.c

cifs: Fix memory and information leak in smb3_reconfigure()

2026-01-11 15:21:54 +01:00

fs_context.h

…

fscache.c

…

fscache.h

…

inode.c

smb: client: Fix refcount leak for cifs_sb_tlink

2025-10-23 16:16:23 +02:00

ioctl.c

…

Kconfig

…

link.c

…

Makefile

…

misc.c

cifs: parse_dfs_referrals: prevent oob on malformed input

2025-10-23 16:16:25 +02:00

namespace.c

…

netlink.c

…

netlink.h

…

netmisc.c

…

nterr.c

…

nterr.h

…

ntlmssp.h

…

readdir.c

…

reparse.c

…

reparse.h

…

rfc1002pdu.h

…

sess.c

cifs: reset iface weights when we cannot find a candidate

2025-08-28 16:28:30 +02:00

smb1ops.c

cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points

2025-10-19 16:30:45 +02:00

smb2file.c

…

smb2glob.h

…

smb2inode.c

smb: client: fix refcount leak in smb2_set_path_attr

2025-11-24 10:29:56 +01:00

smb2maperror.c

…

smb2misc.c

…

smb2ops.c

smb: client: fix potential cfid UAF in smb2_query_info_compound

2025-11-24 10:29:12 +01:00

smb2pdu.c

smb: client: validate change notify buffer before copy

2025-11-24 10:29:54 +01:00

smb2pdu.h

…

smb2proto.h

…

smb2status.h

…

smb2transport.c

…

smbdirect.c

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

2025-09-25 11:00:09 +02:00

smbdirect.h

smb: client: make use of common smbdirect_socket

2025-08-15 12:09:04 +02:00

smbencrypt.c

…

smberr.h

…

trace.c

…

trace.h

…

transport.c

smb: client: fix cifs_pick_channel when channel needs reconnect

2025-11-24 10:30:08 +01:00

unc.c

…

winucase.c

…

xattr.c

…