diff options
| author | Namjae Jeon <linkinjeon@kernel.org> | 2026-08-16 13:46:36 +0900 |
|---|---|---|
| committer | Namjae Jeon <linkinjeon@kernel.org> | 2026-08-17 22:38:25 +0900 |
| commit | d8fc4fc7e57fc2bfd45699a10ee0df8ab9dccfa5 (patch) | |
| tree | bf1e39d08362cfe8b78418e008c6f6b9d9f325ea /scripts | |
| parent | 12a6680ce59bcd431730c9f049caddb017964c64 (diff) | |
| download | linux-d8fc4fc7e57fc2bfd45699a10ee0df8ab9dccfa5.tar.gz linux-d8fc4fc7e57fc2bfd45699a10ee0df8ab9dccfa5.zip | |
ksmbd: decrypt requests from expired encrypted sessions
Previous-session replacement marks the old session expired but retains its
SMB3 encryption key. An in-flight encrypted request can still arrive on
that connection. Rejecting the expired session before decryption made ksmbd
treat the request as a key failure and abort the transport, causing
reconnect failures.
Allow key lookup for expired sessions that have encryption enabled. Keep
the session reference during validation so the normal
STATUS_USER_SESSION_DELETED response is encrypted with the old key. The
session remains expired and no command is executed.
Fixes: fa9415d4024f ("ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session")
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions