Henrique CarvalhoandGreg Kroah-Hartman 787769c8cc smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() ...

commit 77ffbcac4e upstream.

On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is
freed via free_transport(), which does not decrement active_num_conn,
leaking this counter.

Replace free_transport() with ksmbd_tcp_disconnect().

Fixes: 0d0d4680db ("ksmbd: add max connections parameter")
Cc: stable@vger.kernel.org
Signed-off-by: Henrique Carvalho <henrique.carvalho@suse.com>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-02-16 10:17:47 +01:00

..

mgmt

ksmbd: fix recursive locking in RPC handle list access

2026-02-06 16:48:29 +01:00

asn1.c

…

asn1.h

…

auth.c

…

auth.h

…

connection.c

smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()

2025-08-28 16:28:44 +02:00

connection.h

ksmbd: fix null pointer dereference in alloc_preauth_hash()

2025-09-19 16:32:08 +02:00

crypto_ctx.c

…

crypto_ctx.h

…

glob.h

…

Kconfig

…

ksmbd_netlink.h

ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL

2025-10-23 16:16:43 +02:00

ksmbd_spnego_negtokeninit.asn1

…

ksmbd_spnego_negtokentarg.asn1

…

ksmbd_work.c

…

ksmbd_work.h

…

Makefile

…

misc.c

…

misc.h

…

ndr.c

…

ndr.h

…

nterr.h

…

ntlmssp.h

…

oplock.c

ksmbd: fix refcount leak causing resource not released

2025-08-28 16:28:33 +02:00

oplock.h

…

server.c

ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

2026-02-16 10:17:47 +01:00

server.h

ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL

2025-10-23 16:16:43 +02:00

smb2misc.c

…

smb2ops.c

…

smb2pdu.c

smb/server: fix refcount leak in parse_durable_handle_context()

2026-02-11 13:39:10 +01:00

smb2pdu.h

ksmbd: provide zero as a unique ID to the Mac client

2025-07-06 11:00:06 +02:00

smb_common.c

smb: server: Fix extension string in ksmbd_extract_shortname()

2025-08-15 12:09:06 +02:00

smb_common.h

…

smbacl.c

…

smbacl.h

…

smbfsctl.h

…

smbstatus.h

…

transport_ipc.c

ksmbd: fix recursive locking in RPC handle list access

2026-02-06 16:48:29 +01:00

transport_ipc.h

…

transport_rdma.c

ksmbd: smbd: fix dma_unmap_sg() nents

2026-02-06 16:48:27 +01:00

transport_rdma.h

smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()

2025-08-28 16:28:44 +02:00

transport_tcp.c

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

2026-02-16 10:17:47 +01:00

transport_tcp.h

ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL

2025-10-23 16:16:43 +02:00

unicode.c

…

unicode.h

…

vfs_cache.c

ksmbd: vfs: fix race on m_flags in vfs_cache

2026-01-11 15:21:44 +01:00

vfs_cache.h

…

vfs.c

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

2026-01-11 15:21:49 +01:00

vfs.h

…

xattr.h

…