Threats tagged 'ghsa-52g3-8w7f-v5w2'

A vulnerability in the Linux kernel's ksmbd component involves improper handling of blocked file lock requests. Specifically, file_lock objects retained for byte-range lock bookkeeping may still be linked in the VFS blocked-request graph when freed, causing potential kernel bugs. The issue arises because the ksmbd_file reference count does not cover the entire blocked-request graph, leading to a lifetime mismatch and kernel BUG_ON triggers during lock release operations. The fix involves detaching these file_lock objects from the blocked-request graph before freeing them.