Linux Kernel SMB Client Lease Break Race Condition Vulnerability

A race condition vulnerability has been identified in the Linux kernel's SMB client implementation. This issue arises in the 'open_cached_dir' function, where a valid 'cfid' (cached file identifier) may incorrectly be treated as new due to a lease break. If the 'cfid' is allocated before the lease break is processed, it can lead to a reference leak of the directory entry. The vulnerability affects the handling of cached directories in relation to lease management, potentially causing inconsistencies in directory reference counting.

Impact

Exploitation of this vulnerability can lead to a directory entry reference leak, which may cause memory management issues or inconsistencies in the handling of cached directory entries.