Files
linux/fs
Joshua Rogers 35521b5a7e ksmbd: close accepted socket when per-IP limit rejects connection
commit 98a5fd31cb upstream.

When the per-IP connection limit is exceeded in ksmbd_kthread_fn(),
the code sets ret = -EAGAIN and continues the accept loop without
closing the just-accepted socket. That leaks one socket per rejected
attempt from a single IP and enables a trivial remote DoS.

Release client_sk before continuing.

This bug was found with ZeroPath.

Cc: stable@vger.kernel.org
Signed-off-by: Joshua Rogers <linux@joshua.hu>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-11-24 10:37:41 +01:00
..
2025-06-10 22:21:16 -04:00
2025-06-11 13:41:05 -04:00
2025-09-26 10:14:19 +02:00
2025-10-29 14:10:32 +01:00
2025-10-19 16:37:06 +02:00
2025-10-29 14:10:15 +01:00
2025-10-19 16:37:44 +02:00
2025-10-19 16:37:44 +02:00
2025-06-29 19:03:46 -04:00