ksmbd: Fix slab-use-after-free in smb3_preauth_hash_rsp

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Description: - Vulnerability Name: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp - Description: A slab-use-after-free vulnerability exists during the handling of SMB3 pre-authentication responses. Specifically, the function should be called before to prevent the session from being freed prior to the call to . 2. Fix Measures: - The calling order of the function was corrected to ensure the session is released before calling . 3. Patch Submission Information: - Submitter: Namjae Jeon - Submission Date: November 4, 2024 - Submission Description: Fixed the slab-use-after-free vulnerability in SMB3 pre-authentication response handling. 4. Patch Content: - Modified the file, specifically adjusting the code in the function to ensure the session is released before calling . 5. Patch Scope: - Affected Versions: v5.15+ - Tested By: Norbert Szetei - Verified By: Namjae Jeon, Steve French 6. Patch Status: - Status: Submitted to upstream. This information provides a comprehensive understanding of the vulnerability's nature, the applied fix, and the verification process, which is highly valuable for assessing the issue and its resolution.

Goal Reached Thanks to every supporter — we hit 100%!

ksmbd: Fix slab-use-after-free in smb3_preauth_hash_rsp