Re: [PATCH v2 5.10.y] cifs: Fix connections leak when tlink setup failed
Sasha Levin <[email protected]> Thu, 23 Apr 2026 14:59:36 -0400
| Newsgroups | gmane.linux.kernel.stable,gmane.linux.kernel.cifs,gmane.network.samba.internals |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Apr 23, 2026 at 05:41:12PM +0300, Vasiliy Kovalev wrote: > v1 of "cifs: Fix connections leak when tlink setup failed" > (CVE-2022-49822) is currently in queue-5.10: > > https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git/commit/?h=queue/5.10&id=685f89e4d2b45768ca796eb22ec1a553fecbdf05 > > Please drop it and apply v2 instead. v1 introduces a double-free for > mntdata on the new goto error path from mount_setup_tlink() failure: > after a successful dfs_cache_add_vol() the pointer is owned by vol_list > (vi->mntdata), but the error: label still calls kfree(mntdata). v2 NULLs > out mntdata after the ownership transfer. I've dropped v1 from pending-5.10 and queued v2 in its place.